last executing test programs: 2m51.059550029s ago: executing program 4 (id=1506): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) epoll_create1(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socket(0x10, 0x80002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) (async) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) (async) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="2b637075202b6e65745f7072696f202b6e65745f636c73202b637075202d64657669636573202b696f205a6e65745f636c73202d7a646d612072c30335e9a3e8d5b810e648"], 0x39) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x2, 0x6, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x4) 2m50.819128645s ago: executing program 4 (id=1508): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@un=@file={0x1, './file0\x00'}, {&(0x7f0000000100)=""/63, 0x3f}, &(0x7f0000000180), 0x42}, 0xa0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0xffffd000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r1, 0x4000, r1}, 0x18) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x3ffdcf, 0x900, 0x42000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2m50.764457934s ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000480)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x30000000, 0x12) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000a0040000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028052000100e00000010c000180080001416467dffe05000500020000000500010006"], 0x64}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x1, @empty, 0x5}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "f90000000000"}}}}}}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000500)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "742105bdc86ed53ed67cf027b224d656d1de9103c817b2608eb452576c9ed8c5", "a8aae540b5236a06a82e9110aac720bb4ffa536ad91b15438e2a7e74549d588532828fcd000bca58a3fb239408507ff5", "f79a6d8765e475088f04af2b140794ba37631f1bcb78d270c4ded858", {"aaa94672664a7bc380c6c7ce4138efc5", "0a4d8143110dbd308193bd39b80317d3"}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc53f}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000380)={0x21, @remote, 0x4e22, 0x2, 'sh\x00', 0x2, 0xb, 0x21}, 0x2c) write$cgroup_subtree(r8, &(0x7f00000002c0)={[{0x2b, 'memory'}, {0x6, 'io'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}]}, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 2m50.474708503s ago: executing program 4 (id=1511): socket(0x8, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x1fd7, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xffffff69, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x2, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @loopback}, 0x10) listen(r7, 0x8) r8 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x20, 0x4, 0x1, 0x1, 0x80, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @remote, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @rand_addr=0x64010100, @private=0xa010101, @broadcast, @broadcast]}, @ssrr={0x89, 0x3, 0x9}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @rr={0x7, 0x27, 0x4e, [@loopback, @local, @empty, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}]}}}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2m49.390895978s ago: executing program 4 (id=1523): r0 = socket$inet(0x2, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @broadcast}, {0x1, @remote}, 0x1c, {0x2, 0x0, @multicast1}}) 2m49.190938869s ago: executing program 4 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) close(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0xac, 0x5, 0x9, 0x1, 0x4}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r3, 0x7, 0xffffa4d4}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000002c0)={r4, 0xfb, 0xa35, 0x4}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x40841) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000006c0)={0x1, 0x8, 0x9e, 0xdc6ba924, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r8, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000340), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x0) 2m34.037498488s ago: executing program 32 (id=1525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) close(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}, 0xac, 0x5, 0x9, 0x1, 0x4}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r3, 0x7, 0xffffa4d4}, &(0x7f00000004c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000002c0)={r4, 0xfb, 0xa35, 0x4}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x40841) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000006c0)={0x1, 0x8, 0x9e, 0xdc6ba924, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r6, 0x0, 0xfaf}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r8, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000340), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r10 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r10, 0x0) 2m30.055301949s ago: executing program 1 (id=1743): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000001200000000800040001000000", 0x24) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000029000000050000003c000262000000e6afc5cbc67f12be67004bcb38cc2cefd172cfb9accc", @ANYRES32=r2], 0x18}, 0x840) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x6, 0x4}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x0, 0xd}, {0xb, 0xe}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) (async) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) setsockopt$sock_int(r10, 0x1, 0x31, &(0x7f0000001600)=0x7, 0x4) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m29.838888489s ago: executing program 1 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r1 = socket$kcm(0x2d, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44040) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) (async) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) (async) sendmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) (async) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x41}]}}}}}, 0x0) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='wlan1\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2m29.531029265s ago: executing program 1 (id=1748): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f00000032c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000050400018004000380440002dd91182480050001000000000006000340000100002c00018014000300fe800000000000000000000000000000000000000000000100"/96], 0x60}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="aa9e9df2649e9f59a1e97e23e859c609c182687bdbda619ea9bc4867d138993d22d4ba01221b48b0a35988cf465eaafe27a692e6f5ac3f85c35be952afb1b4ac138522c88ace20c5736d442a8f4e88ae2bd6a2c1667e4e1cb331872978771265d913846664b642c1efac12dc2945e8edd589d408f0e7779deb971c054a1540dc7f3aef2ca92c4cb4f0a6cd718d0404957372b90fc6ca20ebf49b52f0cb7a1de867b6b6671d7aa2cb8c8149e691ef7f1123383ac2fc860edca2c21f7ca6155ef9d5eec54567c385387d6b08442e008f3e7e3170d7edbff5bc22c6a9184c4a6d580c1771935bb0"], 0x64}, 0x1, 0x0, 0x0, 0x80805}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000680)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000806010300000000000000000000000005000400000000000900020073797a310000000014000780080008400000002005001400050000000500050002000000050001000600"], 0x58}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x104d, @mcast2, 0x4}, 0x1c) 2m29.089799321s ago: executing program 1 (id=1753): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005001800"], 0x78}, 0x1, 0x7}, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r8}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0xa, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x4, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4b1, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x3, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x6}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7ffffffe}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x2, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd51, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd18, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x626, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0xd, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0x3, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x0, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x4, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x4, 0x1}, {0x9, 0x4, 0x1, 0x4, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x82, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0xff, 0x1, 0x7fff, 0x14, 0x3}, {0x9, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0xfffffffb, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x14, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x4, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x80000001}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x8}, {0x39e3, 0x9, 0x0, 0x0, 0x6, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x3, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x6}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r3, 0x1000) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010700000000"], 0x1c}}, 0x0) 2m28.690014846s ago: executing program 1 (id=1757): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) unshare(0x28000600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed6, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x6, 0x8, 0xba27, 0xfffffffe, 0x100002, 0x10000, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@rand_addr=0x64010101, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) bind$ax25(r6, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}}, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 2m27.620157763s ago: executing program 1 (id=1761): r0 = socket$inet(0x2, 0x3, 0x14) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001800)=""/4096, &(0x7f0000000200)=0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 32) 2m26.179039362s ago: executing program 3 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 2m25.086907093s ago: executing program 3 (id=1770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2800100000000000110100e803"], 0x28}}], 0x1, 0x2000c050) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) 2m25.038366719s ago: executing program 3 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x38, 0x18, 0x0, 0x0, @binary="a5347e82b0cee3b11fc3345bb10ce546b5ddee07915c331e402c66d2a06a524773db55c1f225432c301c7374df2d44463d996dfa"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r4 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmmsg$sock(r4, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004050000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="004000000000000000008840fac8878948ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000300)={r8, r8}) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 2m24.841326334s ago: executing program 3 (id=1775): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfff9, 0x7, 0x0, 0x1006}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0xa0}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1826aae1efd7eb74f42d63ad0235df9e7d15f2e005fe6cb55b5bb9fa6935841d949e607cb51726b300000000000bd754d22daea96acf2771211a659f18c06e", 0x5d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3}], 0x1, 0x4000001) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000001640)=""/83, 0x53}], 0x2}, 0x40002060) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x29c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0x7ff}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xe6, 0x2a, [@random={0xfe, 0x5d, "87aa7111b8af02c57c5d9542032a0cfd22f1e2dbd5d7bab40678789ea71cd228ed04fddbed84f94413d1395b8c407a820b272062ad32461595e36390093cad71daae583c12914656144f2847597cbf533ff0a1fae0449a22109262ab23"}, @mic={0x8c, 0x10, {0x94b, "cedd948b846b", @short="289fe304a2040d0d"}}, @channel_switch={0x25, 0x3, {0x1, 0x38, 0x40}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x101, @void, @void}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0x0, @val=0x1, @void, @void}}, @preq={0x82, 0x57, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x2, @device_a, 0x9, @value=@device_b, 0xb8e, 0x2, 0x5, [{{}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{0x1}, @device_b, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x401}]}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x168, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfff}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9184f21}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xbb2}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x100}, @NL80211_BAND_LC={0x8, 0x5, 0xd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="d329e33ec91360760742d74b8b500a6e190b4196"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9c09}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="4b16a13779c56c6da390b18a832c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="11715a8653b3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3f4c}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6c7}]}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f0000000480)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0xb0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}], &(0x7f0000000600)='GPL\x00', 0xc33, 0x29, &(0x7f0000000640)=""/41, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0x3, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r5, r5, r5, r5, r5, r5], &(0x7f0000000a40)=[{0x0, 0x1, 0x3, 0x4}], 0x10, 0xffff}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b40)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={r7, r8, 0x22, 0x0, @void}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) 2m23.815467891s ago: executing program 3 (id=1784): r0 = socket(0x40000000015, 0x5, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000400000000000eb13000000180001801400020073797a5f74756e"], 0x2c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2b, 0x0, 0xe, 0x2, 0x71, @remote, @loopback, 0x1, 0x80, 0xa, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x3, 0x10000, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0x41, 0x1, 0x8, [{@broadcast, 0xfff}, {@local, 0x6}]}, @ssrr={0x89, 0x7, 0x60, [@remote]}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x3, [{@empty, 0x7}]}, @ssrr={0x89, 0x13, 0x80, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x2e, 0x3, [{0x7, 0xe, "7abd43317b6a4051d2fbf305"}, {0x1, 0xe, "64f796f059f3c79622226963"}, {0x2, 0xc, "b278066aea7383d91b6c"}]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0x4, "0f2a"}, {0x1, 0xa, "e0b8ff2034859edf"}, {0x5, 0xc, "4ea568076b00eb3e59b3"}, {0x2, 0x5, "a27ccb"}, {0x7, 0x2}, {0x7, 0x7, "8642672000"}, {0x0, 0xa, "7db8be1a954f6ac1"}]}, @lsrr={0x83, 0x7, 0xe4, [@multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="140002007465616d3000000000000000000000000c0001800800030001000000940002807c000380140001800800010003000000080001000700000034000180080001000600000008000100080000000847010002000000080001000400000008000100ef000000060002002e00000014000180050002000000000008000100faffffff1c000180040003000e00020027245b8c2e237d2a2b0000000400030014000380100001800400030008000100070000004000018008000300020000001400020069703665727370616e3000000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000200000008000300030000000800030003000000"], 0x26c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r5, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'geneve0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01980800000000002000128008000100677265001400028008000700ac140900060003003f"], 0x40}}, 0x0) (async) sendto$packet(r8, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000040)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x27) (async, rerun: 64) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) (async, rerun: 64) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) 2m23.69925441s ago: executing program 3 (id=1787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002400010329bd7000f7dbdf240500000004001a"], 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 2m12.420528519s ago: executing program 33 (id=1761): r0 = socket$inet(0x2, 0x3, 0x14) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001800)=""/4096, &(0x7f0000000200)=0x1000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) (async, rerun: 32) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (rerun: 32) 2m8.650535953s ago: executing program 34 (id=1787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002400010329bd7000f7dbdf240500000004001a"], 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 1m51.370251022s ago: executing program 6 (id=2051): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000070605000000db0000000000000100000808000000000000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x16}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x100000000000}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0xa3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1f, 0x1, 0x6594) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x50}}, 0x0) 1m51.311160959s ago: executing program 7 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES16=r7, @ANYBLOB='\a'], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m51.177358704s ago: executing program 6 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1m51.153648497s ago: executing program 7 (id=2054): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0xffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x18, 0x0, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="f185f760a91e3e0b1f990d3b03a5517644baa879e267c0a69e1c5e25000d9a26fb228b4a847e4fafaadca19ca9c25d3f8bfc3d59fc6ddb5e80a5b0cc7bf233d9a137845aac398778c8860373c7892df743fbbc545053fd7d5c5113fafd59639bf83c76b65bca40c4c239cfc7ede32d32f49e02c2e20392a1e02ec58cc56671dc80ee432974f510712598a16f", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf2506000000080006001a7d0000080006000100000008000600011b000004000180"], 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0xfe4f907a138f28a) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) getsockopt(r2, 0xfffffffd, 0x3, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m50.807043741s ago: executing program 6 (id=2059): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x2, 0x7, 0x0, 0x0, 0x8, 0x10005}, [@FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x266b5921a2b1adb0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x8004f, 0x10000}) sendmmsg$inet6(r3, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4d5fb015, @loopback, 0xe69}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="46250db87fe024084bcb31", 0xb}, {&(0x7f0000000200)="87edf20e3e9c404e9f2c1180f2ca74184b771d158c6fe788892f890eaf560551abbd1b347f3bf8a3b5542ccd356cde95ab478bb0cf07904a51a16ec4183438de5a55a8695d92b08ae07f854ee22c3afb739764c4f05060aeffd25cfde992ee546df25cece82c2ec499a51244a941da35690d5f3615c5c3d9371d3607101c032f1333ed17bde3ab5f5a9d911d029d6e4ffb7fd55beb5bf5ca6e687b70df73c3e32615e28b3985f8e6c475fa56bbfd60ac5f27", 0xb2}, {&(0x7f00000002c0)="3a6a2a20ec356031dde6a45286ef353dd021faafe8cfeece495ecb6e4418de7cd2301b7cf98bfc1fc3c4938edd2bf17461db125c3a773328461491d2cb4aac65622e2a891beb21aeb1b9b7f0ade3768013d2068566c1d57daaddf38bfdb8a000ab500d7b5dc295ba", 0x68}, {&(0x7f0000000340)="bb4f20b3378aea16ccce91626cd0c99373a158a7c71cf9ee7ec607062289e0c3a297cb800b2a3f9378a645d9ce3a4bb1d608d16cab9404bdc649abf5a5fabad99fc281f8d60395", 0x47}, {&(0x7f00000003c0)="0587aef50e76ae426d2549819c09be384ad8af0c39c0aa70ff75cc9e62918dee3dfd83d39c8b2fada4ffb567b72343cc0246d4457b7e9200d0c38d07ff624afde97c7942836b5167504354e266ce39afe5c5b56333a5ec730e12850d5e9232c50bb527dd4397c4c792dad030c5c8879ec0c3bd719e287d7cd43c29878b8cac0d0bfd9fc7d064a04d5dfcf7485f1fa3", 0x8f}, {&(0x7f0000000480)="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", 0xfb}], 0x6, &(0x7f0000000600)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x2, 0x6, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @private0]}}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0xb8}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @local, 0x3}, 0x1c, &(0x7f0000000d40)=[{&(0x7f00000006c0)="7558ecd1fb8c30817eeb43b15e3cec0a9091cb5e99ef22b80878d0576917bb59f95f01ac6d84f37c60ce5671700f9852d458edf4a30a85a848ba5a8d713d095a30a31865f129092651437cd3b62cf9bbf0615a78d5818f7e6d88feb344c2969624b8e14ebebfe02de8dfb197ef9bc4a9216d8d3b2ea9c81dde4533cbd29dbb0b8b6438be24a39a4051430db2c076c23ada7384ec6650ef6db63c046fb094b7759fd3ec685e9008dcaa539a791665c696809bf7dea4f72df4cffc5fcac52c79e7be68d37a64959a2c0dbf31737fccfe644422cbf13e", 0xd5}, {&(0x7f00000007c0)="8539e1b285fe4297278ddc8ff4395f06a10c4df6221bbddf53cde510132feb81417502c9508d685e816dd67b98c5166dbe50c8ff9a5bbe78cec9828043035cf81b3ae217b39c487bf0f21fea7db3b18496d68c8bd9ff1c166483f2059986c61a0a8a73010ef6c68918fae2b4bc10529a53cb20efbe1889d82a167df5e5b8f004bb1f2c39acefb605208d24ccefb1967c510c", 0x92}, {&(0x7f0000000880)="4dae793a0e8faaed7ed9f333399c8aa5575a50c884ae2bef0c5e0fd6130eaab733dfe05ce94f3e3e69313c2559792e803cd3abee0d703742980ca16497151a7142fba80d419b064ed19f49cbc0495f3a2a537d95b642f1b1b360c4e52da9b30434af20e732b3c7086b2533c9bf0bdb975816e5faf48b980d0fdcafe950eac002447ad2b78da69952556620a0495f24b5b9390fd848f563fb84939679bbf8db60d27d9782160bb6b2922de92b23bd0ff0a10eae7eb4520d4492f1d1123be50f2a84fb4e", 0xc3}, {&(0x7f0000000980)="9bd8e62c4055b8bc7ec12dc53eef6a9982294a639bcf76de09200d5891d718989fa3cc", 0x23}, {&(0x7f00000009c0)="ca9a34e851edfe3117e87982153a6eeffed08a7598f94797ebebbdbc116a9ef52263b92d7ea6a7d83bbafc2ee1fa3ac189ab0c9a3daa2fa8b678513574b4a6c931a07fe8c08d1084754f4167488f8280a22d2f5a7af8c40c498646b8d1167a29624a59dc07d81f61ee9059c62fff88297d5838fbfed374ea23f1709b79d03f0918f8", 0x82}, {&(0x7f0000000a80)="403b8520f1d86aa3ac7676d671cb525993f1587fe1f1e9fc7d92ecedbf9a55b9ba19a5a4f605295b3111733bc2768a7c50baabcf26995b28796293d886bd08dab93c005590704b4cbe3ba85c973ddcef0552d14aa690bfe724760bf3ee6b0e6c1c22dc964e17d537edce4ca2aedf997f0c190bd57aadb214cca511d23f2e96896cdafeae943065b9394f7c4bc93490a7cabcc8b4972c7cdf0e55a9d2168326be14ea39b6d569716e96007581ad3cb84a950b2bcb415483f4fb05c4358ab90361", 0xc0}, {&(0x7f0000001080)="8b6a3561870f0872ea205e987199b827016b34fa574c4ba1acdbda1e11801952301675f74e4e68867a78", 0x2a}, {&(0x7f0000000b80)="81122ef0997dd89f2232c1c508fd90554e9bf8984ee07df988a75218c3b0af31a09d24d55e2f419bdfd2d0f005f208250581fec9b6238af69de12a010830dd5062c75b41aa44d7c9a4fdd1bd9bfca0ddf9e670eec1d84dbbed5e903c8c8bf2b8fba16fb41d99db708087fbb4382e95f3d400465ce2b3a09b970ec6f5b4f0af883ed4b0832fa06c3b588e", 0x8a}, {&(0x7f0000000c40)="6499d38fe5610039763245ab456109ada0011420eef00a6446c293a26473395bbad59e5649711ac1dcbe6db020908ee24008220dcdaa5c51ae4f9eaeebb932ff6f6a7e888475c54e6a9fe790ca7ba23eabc75bf29edbc22a0d01f3b392d20c1e09b08570cbcf0f7bed4a34c63c4a72375173185817043deed28762ed438ae934a58c4d325a4ee9edc75ed2d9e4bb6cd1a23a3a85f75271e98455319f52d8f298ab713d4124127416c677d11e6074fd1f5f6d01ea11ca850f6ef5a170c644755be538b570c3b6eb", 0xc7}], 0x9, &(0x7f0000000e00)=[@rthdr={{0x88, 0x29, 0x39, {0x1d, 0xe, 0x2, 0x5, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xed}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}], 0xd0}}], 0x2, 0x4020010) 1m49.919070926s ago: executing program 7 (id=2068): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f0000000300)}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) (async) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) ppoll(&(0x7f0000000200)=[{r1, 0x8}, {0xffffffffffffffff, 0x80}, {r3, 0x4}, {r2, 0x40}, {r0}, {r2}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x200, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x200, 0x30, 0xffff, 0x162e00d9}, &(0x7f0000000100)=0x18) 1m49.866752352s ago: executing program 6 (id=2069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819", 0x69}, {0x0}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000900)=""/229, 0xe5}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000012c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x4}]}, 0x10) 1m49.766886016s ago: executing program 7 (id=2070): r0 = socket(0x1d, 0xa, 0x4) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xd7dc}]}, 0x24}}, 0x40000) (async) r3 = socket(0x1e, 0x1, 0x0) listen(r3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) close(r5) (async) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$inet(r3, &(0x7f0000000000)=""/111, 0x6f, 0x10000, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="f401401000"}) 1m49.714312898s ago: executing program 6 (id=2071): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x3, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="1200000000000000bf963c91060000000500000000000000"], 0x18, 0x200408d0}, 0x8840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000fcdbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="a15013a8a389f7b8ebb2f8b98016ec133a5d9551274958dfaab89671a981eedc44f8d86c55309bf143c7db13f120c10cd33972fdfbd1b6aef0fab9f60369e7afabadba6052f76e596fbdf76af8ad305308ab69a45be1f7451fe1580be20e8940e2ac5b50bc4eb1f2c20cdd632c50d393eeb4db8f53df5c504eb6fe305f01e6421c0976e939c397090c10c6e95a255909b8cc1129eccfcbc85a"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) write$nci(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="40010421f9252ea3"], 0x8) 1m49.65684951s ago: executing program 7 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) bind$rxrpc(0xffffffffffffffff, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x202) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898, 0x0}, &(0x7f0000000880)=0x10) bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae6810ec259f0bfba1973a8b12f4d11dabc1360ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643e410ddbbfe8148fd2aa4a46e3e10213183112f97bb1b30a99b250389e8521f3e7c634923eb202b35834e1ee935c200d7140066bac96fad1591ed9a628a164ae2760f51b981fc1829feb7d3ead8bdd9ce3b5d5deee864e3b6b82d", @ANYRES8=r9, @ANYBLOB="dfe9aaaaaaaaaaaaaa8000000000000000000000000000aaff000108000000000000000000000000005eba0000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1m48.55041573s ago: executing program 6 (id=2076): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x2000000}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r7, 0x0, 0xf69}, 0x18) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r8) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1m47.339024449s ago: executing program 7 (id=2081): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x10, "fd990d5152f8e13179fba22754380c3c"}, &(0x7f0000000640)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="0700040006d202857b795422"], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='FROZEN\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0xfffffe4d, 0x0, 0x1, 0x0, 0x0, 0x30044894}, 0x880) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.495692295s ago: executing program 35 (id=2076): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)={0x2000000}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x103, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r7, 0x0, 0xf69}, 0x18) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r8) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) 1m32.307389001s ago: executing program 36 (id=2081): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}], 0x10) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x10, "fd990d5152f8e13179fba22754380c3c"}, &(0x7f0000000640)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="0700040006d202857b795422"], 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='FROZEN\x00', 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0xfffffe4d, 0x0, 0x1, 0x0, 0x0, 0x30044894}, 0x880) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.250362801s ago: executing program 9 (id=3008): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6"], 0xfdef) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_int(r2, 0x0, 0x25, &(0x7f0000000140), &(0x7f0000000280)=0x4) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = socket(0x10, 0x803, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="0100000001"], 0x3c}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2}, 0x8d0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) 15.876224831s ago: executing program 9 (id=3015): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="faffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a3af1ec1c23e727064d3d1eb1a022ad5190b5bef6ebeac5f6c0c809e80eb34bdcce83f0240f917d5812690adc98e6d245baeac416cc0516f90821e4a4447696d5ceaee06adda662f40c8e23f129a15b323fcbd54360700000000000000fe4fb1e9a83ad5ac9599cb355fb6ac4b035cbedc4ec2dcf62f1dfd95f9545e549d70729a7a133537c0e36aed32faa0099e77ea"], 0x50) 15.323391588s ago: executing program 9 (id=3020): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x1030}], 0x1, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x94) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4}, 0x10) unshare(0x40000200) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x4}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a00200231c040008001b00000000001800168014000180100002001000ffff"], 0x40}, 0x1, 0x0, 0x0, 0x2004c001}, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000380)="0eb5", 0x2}], 0x1) 14.525078523s ago: executing program 9 (id=3033): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d7}, 0x0) 14.423931224s ago: executing program 9 (id=3034): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0xf, 0x0, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000004000000040000000d00000040000000", @ANYRES32, @ANYBLOB="0000001100000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3d, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000000c0)=""/4092, 0xffc}], 0x2, 0x5, 0x45) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x2, @any, 0x0, 0x2}, 0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x14, 0x0, @val=@perf_event={0x5}}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1e75f1e45c371f59bfea7b8f4dd7e1606e8b52c2c8b592f1535afba8c4503cd0c137a5f24115e5efd15bb761caac2f42cce9d26e0d22549959ddf71ae75e50e6e4af5f8a635216040c622f5dd15f51883644ce620d21d77ff9edfd4b4cd64dc5e2679f7ec87a47e8875e8171825f0346f33636271814043abe60d0964fbd0f3507eb88d947af03b66c63b51a336e", @ANYRES16=r7, @ANYBLOB="010025bd70000000000001000000000000000941000000140018000007327564703a73797a3200000000"], 0x30}, 0x1, 0x0, 0x0, 0xa050}, 0x0) 14.284661446s ago: executing program 9 (id=3036): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x100000}}, 0x40) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket(0x1d, 0x2, 0x6) (async) r4 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000780)={0x0, 0x9, 0x2, 0x1}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000900)={0x2, 0x243, @start={r8, 0x0, "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", "005c892e20d1aff42691ea4f4859ab7e95ddb82748c0d058aa309ea3ae54cfe703215335b533a60c5a419681c0f99108b27e5baece488046515fcbce26935a7da5da22b3d6a26af68b928abff75a17c8be2b792a5074c9be795cb77964f27a89965264c0186ae2648e63a14a7ecb77c0f5cc4de371227b3d8fbdbe2a26aaceec22cf9f599cdeefebbb9e9e48ab9a9e4238bdee73a00317402ccfc5a372b114ae3cbe5ea126829dbc90e76c50d8ec7fa10ccb65bc0db0eff9a8340703b437ef9c0bbc3c237f22fa8f6b5026aef7e37e801a1fbefeafee568d2076b8aa855196bd804711524e1d57eab4ea4a0ecf4a5a8c93f31b2f8e4422d1e13064b0e53b95110ddc8e0111dc734a7e1b24a697d1ed42a61c6d40a041438403ee1e145d05d4c1b1254f0671eb85a37988496f9c82cda595a80bb9ce0037e1bd4c4be7a7237d4d9d6337df26e2cb8d1c761720248a5aa3ab6117c2511f1bbe37dadddc5792035838bef30ef2ab0818e494b850e01dc443a2d8543ea21d44e44b256036cef1c9907709b57d49abf02d77fda04c16806fbf47e5e752ff05d207b24b408a92ed34310ae0aa9a3c5a03fc963691c586a48cc44976f69982ec961792fc932394af4e1925c4ae945903b5eccab563fcf7126282948ba092f45d56d3ec3b358641e998800ac0c5726a84d9571b10a5e8d700cb0dd39637b5302da017ee253cd7143584bec795b6f6fce4bf885cac71d9dfb688baa3d4de4048a35c2e7fef53d900e1e3e644142d744b45e89bbd7c28196f480eaa61662a47d70e613838d2602f5c14d508777d6f4479efd3ffd25a4b4518355308adeaee90e0c56d8ea115cea2c70fa65aff348f37940113424f2229263602109836f0e53ccec304b348833866a4b005c764f50d0a71482a9f26e2a6212f60f97b0fd3b784c5c9f1428c42ccc6e070fd14996a99bef56afc5e9a3c0b38e4aab6f35c830bfa0e06187d594db0f6b7002d2216ad360f046551247a334611ee0b6f43e672a720b6d44145a989df89a7c5fe855234e43d70e44911718b83e120df2bd13df834657581c50526e0b3189aecaf08cc31375d38ceea30fe5b7615c494d791892c51c4a6ebdd68bd64af2511cf529376e0f85e624232c87fa69e4bbc7e61fd060213dd62a2d309127527ad6b06058ff173b978642ff8152282e03079b6a069fb93acfe889bc0b430360a3080ad4660e43cec006d530feba9c5bb6673b5514d766c753079d78517306e36872b0ac3c2be86f7572854667d3b91f2d5e971559a7070aedb0ba92ae7eb72c94e45adad96de46b2de6691560eb8a463f0513a14a976b12debdd11283438771962cae702eeb15091fea6171efd12119d90147b43d0fb6bebd82d494a9c4adb691503b89ce74c9bf0f1cba701b84349d6f60a1685466b3a87e44343ebfb5db11515cf551136b1"}, [0xcdd6, 0x8, 0x718, 0x0, 0x5, 0x7fffffffffffffff, 0x3, 0x1, 0x200, 0x0, 0x616d, 0x6, 0xb200000000000000, 0x5, 0x6, 0x8, 0xe, 0x9, 0x9, 0x7, 0x4, 0x2, 0x1, 0x1000, 0x81, 0x4, 0x6, 0xfffffffffffffff9, 0x8f9, 0xc6, 0x2, 0x8001, 0x5, 0xd7b7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x8ddd, 0x0, 0x6dc8, 0x80000000, 0x9, 0x7fffffff, 0xffff, 0x7fffffffffffffff, 0x200, 0x4, 0x6, 0xa, 0x7ff, 0xffff, 0x8, 0x3ff, 0x10, 0x3, 0xd, 0x400, 0x8000000000000001, 0x62, 0x3, 0x8000, 0x7]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000b80)={0x0, "5ad2782f58bc6d71ebd4de2cf2cb038a"}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001b80)={0xb, 0x1, {0x5, @usage=0x5, r6, 0x9, 0xbff7, 0x1000, 0x4, 0x7, 0xac, @usage=0xfffffffffffffff9, 0x7fffffff, 0x9b1, [0x3, 0x6, 0x4, 0x5, 0xffff, 0xd49]}, {0x7f, @struct={0x2, 0x508}, r8, 0x29, 0x2, 0x3, 0x3, 0x8, 0xf2, @usage=0xfffffffffffffffe, 0x0, 0xffffffff, [0x4, 0x5, 0x5, 0x2, 0x1]}, {0x8000000000000001, @usage=0x8000, r9, 0x51db, 0x0, 0x9, 0x9, 0x7ff, 0x49, @struct={0x2, 0x7}, 0x1, 0x3, [0x8, 0x5, 0x4800, 0x5, 0x0, 0x3]}, {0x7, 0x8, 0xa3bf}}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r3, 0x0, 0x7f}, 0x18) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.779047173s ago: executing program 2 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280082d745c4843a5c701b908619be13b4fe66579c2f6b96cb547fd0dc6a7bba3198c949db466635faf0e083ee021afd840ee7dce21126a42c1ce41223f285b9a8592ad47a1f0715fd1e97a5aa47e1f3149f7115fa349c0b3d486a88c6227772eeaa70fffcd4c713d3bad501e5a983c0faff060f1470e942d"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = socket(0x6, 0xa, 0x9) connect$l2tp(r2, &(0x7f0000000040)={0x2, 0x0, @empty, 0x6}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) recvfrom(r4, 0x0, 0x0, 0x2041, 0x0, 0x0) pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r10, r8}) sendmmsg$inet(r9, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='J', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) 2.346282297s ago: executing program 2 (id=3159): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) close(0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2.182353022s ago: executing program 2 (id=3161): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6b}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc80d}, 0x4004) socketpair(0x1d, 0x800, 0x8000, &(0x7f0000004740)) 2.163660507s ago: executing program 2 (id=3163): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001700)) 2.007863611s ago: executing program 0 (id=3167): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) r5 = accept(r3, 0x0, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfffffffffffffe4f) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x14, r7, 0x1, 0x70bd27, 0x255fdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2081}, 0x2000c0c0) sendmsg$inet_sctp(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, 0x0) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000140)={0x7d, "ce2ceb7b86232ce997293eac2136c80e043319f3641e5ed0ed47ee98079ba0e3c2d03c9aa46e0c6682cb643d1334d1fd2d365a90e12520125cd48f69aa6ed85a8e55686f402ddc6e51a7c6d3e6c13dc986fdc379174772c8e6285bbec695474c710c809002c9b03517f6f2198a1ac78437355074ef5e643cfa26f1cf684c7472"}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 1.787862695s ago: executing program 0 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000780)={'broute\x00', 0x0, 0x0, 0x0, [0xb003, 0x8001, 0xffffffffffffffff, 0x2651, 0x4, 0x3], 0x4, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) write$cgroup_devices(r1, 0x0, 0x8) write$cgroup_int(r1, &(0x7f0000000240)=0x9, 0x12) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0xff) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="5e54e574da9388a6dc628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x8804) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x12, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.694688469s ago: executing program 0 (id=3172): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a00000005bd74d88f27064b0a23223eb622f440de858fbca7f5ddc09346c2f119465bae2f6a955540fed809e90760a927a30dee7f82cecfdb375af4e1341f7163d3256bc13acc57878a6bdab0e1afdebfd1e6601cdb37d217c50137e342812865544246b6ece7988ef236ff87647ed09e15e6a59b3ee2984a796338e18190a25d219921672001a543b10bfa068795964a391f941385f7ff1935343348beec3df53324f20c02", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b00010067656e65766500000c00028008000b40000000011400030067656e65766530000000000000000000"], 0x50}}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000a80)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) (async) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) splice(r9, 0x0, r8, 0x0, 0x7ffff000, 0x6) 1.59493173s ago: executing program 0 (id=3175): unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}, @generic="3cac7ecd"]}, @nested={0x4, 0x37}]}, 0x34}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) unshare(0x2050680) socket(0x40000000015, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)=@newlink={0x30, 0x10, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41420, 0x1000}, [@IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x3a, 0x6, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.410888499s ago: executing program 0 (id=3179): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000640)={0x0, 0x47, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007000000fb7c13a3771a042567a83d6ba423711754370a9e0f57abd365ac6e56fbf6c2afa675486027a93b4a994ca3da61c7f1b24cc3088818b3f931a28a42e1d8c567b95a9124644e4c75fe261a31fd29890dee111d9522e1d245e823"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40840) connect$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r9, 0x111, 0xbb81, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 1.401785256s ago: executing program 5 (id=3180): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff95"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='svc_xprt_enqueue\x00', r0, 0x0, 0x81}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 886.69783ms ago: executing program 8 (id=3181): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 828.663563ms ago: executing program 2 (id=3182): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) 828.332381ms ago: executing program 5 (id=3183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x33) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) close(0x3) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pwrite64(r8, &(0x7f0000000380)='k', 0x1, 0xc) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) (async, rerun: 64) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000380), 0xffc5) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000100)={0x20000014}) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=@newlink={0x4c, 0x10, 0x401, 0xfdfffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000f060101000000000000000001000006050001000700000006000b000400000006000b000200000006000b0000000000371b0e22f3b710de2b8bdcb0dd26c2944cdeb6b2b171d9f8422e3a71a5e6204faa35a776876f6d9d3e1aee0af564b6bb97990f4e1ac77818ba6ff05968eaf2436e0be34b56400fe7d0b6b08e709b8fcef702a1cbd24a88289b6e09bf9b54edcaa0c604aba56709d8366a4fddb8fe988afdb7616ffddac5443aff115201f22da4358f64ceb38d5f083dffa1ab6c5d00"/206], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4040840) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000800)={0xa0000006}) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 771.94237ms ago: executing program 5 (id=3184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc011}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 765.571709ms ago: executing program 8 (id=3185): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb006}, 0x4) close(0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x34) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c60071a5ba203529000000000000950022893aa30ec0508aff498fc3d4e371000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd7, &(0x7f0000000880)=""/215, 0x41100, 0x3, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, r4}, 0x94) pipe(&(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="4b7a9b83650ff0b1eaec8ef24fa048cc311bb8e2eadd2b344f01a69e0084a021455694e8ba91cf07ad5a62251de52aba2dda440777609cbd054ac7d88a013bc01215dcfaa33edc1aba3b2ec51e2858b017ca43006a7c400adbaf94e74a4616eaad2fb6d1acedfbb87d0090272358cca9f0a591f766d60ff9efabcdbbf69d8212219e3252399b6aeba8b1318ae0d1385077980d12bdc58f3b758fc8b5dcf2327373da90143e8487e3511b330e4708ad4b88fdd39617e0200af15728b83d94266848f4ce90be719a0aebe6f6c69b93e6", @ANYRES64=0x0], 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 670.869306ms ago: executing program 0 (id=3186): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000001b000000000000000000000000009e7e241da382cd9cf1536269289a9b699e51324f0f44ed61e8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000bebd405a8c3adf4c5ca295c8e90000000000000000000000ac0f2b64de00", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048894) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) clock_gettime(0xfffffffffffffff1, &(0x7f0000000040)) close(0x3) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff5}}, 0x74, 0x7, 0x3, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 663.372152ms ago: executing program 5 (id=3187): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000a0a0102000000000000000003000005080005402000003c08f0d04000000002"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}]}]}, 0x28}}, 0x0) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) (async, rerun: 64) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000010c0)={0x2, 'geneve1\x00', {0x4c8a}}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0xb0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async, rerun: 32) r10 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x200005}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x21, &(0x7f00000004c0)=0x9, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9f92da1f947be4010018040000000000001dd19a38848a324cb0280000002800000006000000040000000100000f0100000001000000050000000400000052000000fec7ed2a0f030000007597d50016f91d5f7d"], &(0x7f00000014c0)=""/184, 0x46, 0xb8, 0x1, 0xc71f2d1f}, 0x28) (async) accept4(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80, 0x0) 578.736171ms ago: executing program 8 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_CREATE(0x3f, &(0x7f0000000880)=ANY=[], 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40597, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004844}, 0x8000002) 515.006069ms ago: executing program 2 (id=3189): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0xffffc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x4, 0x9, 0x5, 0x7, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0xf, 0x9, 0x5}}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xb}, {}, {0xe, 0x18}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc004}, 0x0) 502.677693ms ago: executing program 5 (id=3190): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004000000040000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002480)=@delchain={0x38, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000085}, 0x4080) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x1, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) (async) accept(r5, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a0004301526b608001d0083400000"], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r9 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r9, 0x8b21, &(0x7f0000000040)) (async) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0xffffffffffffff7a) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) shutdown(r4, 0x2) (rerun: 64) 406.293454ms ago: executing program 8 (id=3191): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @private=0xa010100}}, [0x8000, 0xf6e3, 0x0, 0x0, 0x6, 0x100, 0x8, 0x1, 0xc333, 0x9, 0x1, 0x72, 0x4, 0x0, 0x7]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x10001, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1be}}}, &(0x7f0000000200)=0x84) 279.044788ms ago: executing program 5 (id=3192): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001700)) 93.099327ms ago: executing program 8 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000012c0)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x5, 0x14e, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d7}, 0x0) (fail_nth: 12) 0s ago: executing program 8 (id=3194): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001180)={&(0x7f00000010c0)={0x24, @short}, 0x14, &(0x7f0000001140)={&(0x7f0000001100)="083a359751bbdcd92090c0d33bb90b2dc8c4df5f4d", 0x15}}, 0x44800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x2400c000) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) close(0x4) kernel console output (not intermixed with test programs): +0x77/0x7f [ 334.775594][T13643] ? clear_bhb_loop+0x60/0xb0 [ 334.775619][T13643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.775638][T13643] RIP: 0033:0x7fd00638eec9 [ 334.775656][T13643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.775674][T13643] RSP: 002b:00007fd00717d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 334.775692][T13643] RAX: ffffffffffffffda RBX: 00007fd0065e5fa0 RCX: 00007fd00638eec9 [ 334.775706][T13643] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 334.775717][T13643] RBP: 00007fd006411f91 R08: 000000000000001c R09: 0000000000000000 [ 334.775729][T13643] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 334.775741][T13643] R13: 00007fd0065e6038 R14: 00007fd0065e5fa0 R15: 00007ffdeae562b8 [ 334.775769][T13643] [ 334.781364][T13643] Mem-Info: [ 334.809765][T13476] veth0_macvtap: entered promiscuous mode [ 334.853914][T13643] active_anon:8913 inactive_anon:0 isolated_anon:0 [ 334.853914][T13643] active_file:3208 inactive_file:39982 isolated_file:0 [ 334.853914][T13643] unevictable:768 dirty:109 writeback:0 [ 334.853914][T13643] slab_reclaimable:12964 slab_unreclaimable:147797 [ 334.853914][T13643] mapped:46503 shmem:1360 pagetables:1174 [ 334.853914][T13643] sec_pagetables:0 bounce:0 [ 334.853914][T13643] kernel_misc_reclaimable:0 [ 334.853914][T13643] free:1215544 free_pcp:18680 free_cma:0 [ 334.880225][T13476] veth1_macvtap: entered promiscuous mode [ 334.944804][T13643] Node 0 active_anon:35644kB inactive_anon:0kB active_file:12832kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:186004kB dirty:432kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14864kB pagetables:4668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 334.999639][T13476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.041737][T13643] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.205576][T13643] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.210374][T13476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.303488][T13489] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.323651][T13643] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 335.330808][T13643] Node 0 DMA32 free:964692kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35696kB inactive_anon:0kB active_file:12832kB inactive_file:157892kB unevictable:1536kB writepending:428kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:57764kB local_pcp:27480kB free_cma:0kB [ 335.372260][T13643] lowmem_reserve[]: 0 0 1 1 1 [ 335.378098][T13643] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 335.409012][T13643] lowmem_reserve[]: 0 0 0 0 0 [ 335.414153][T13643] Node 1 Normal free:3896720kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17056kB local_pcp:8768kB free_cma:0kB [ 335.453139][T13643] lowmem_reserve[]: 0 0 0 0 0 [ 335.458229][T13643] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.471185][T13643] Node 0 DMA32: 764*4kB (M) 384*8kB (M) 1*16kB (M) 295*32kB (UME) 18*64kB (UME) 22*128kB (UME) 13*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 5*2048kB (UME) 226*4096kB (M) = 963936kB [ 335.491913][T13643] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 335.504205][T13490] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.517893][T13682] lo speed is unknown, defaulting to 1000 [ 335.524912][T13490] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.536295][T13643] Node 1 Normal: 188*4kB (UME) 58*8kB (UME) 43*16kB (UME) 157*32kB (UME) 44*64kB (UME) 11*128kB (UME) 6*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3896720kB [ 335.555566][T13643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.565316][T13643] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.575073][T13643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.584738][T13643] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.597033][T13643] 44547 total pagecache pages [ 335.601784][T13643] 0 pages in swap cache [ 335.626622][T13643] Free swap = 124996kB [ 335.638995][T13643] Total swap = 124996kB [ 335.643230][T13643] 2097051 pages RAM [ 335.647625][T13643] 0 pages HighMem/MovableOnly [ 335.654356][T13643] 424998 pages reserved [ 335.658587][T13643] 0 pages cma reserved [ 335.703490][T13490] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.724935][T13682] wg1 speed is unknown, defaulting to 1000 [ 336.070265][ T9825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.094233][ T9825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.166622][T13694] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1969'. [ 336.346270][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.391011][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.676064][ T5865] Bluetooth: hci7: command tx timeout [ 337.163971][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'. [ 337.236002][T13719] netdevsim netdevsim7 netdevsim3: entered promiscuous mode [ 337.250280][T13719] netdevsim netdevsim7 netdevsim3: left promiscuous mode [ 337.365290][T13727] validate_nla: 127 callbacks suppressed [ 337.365308][T13727] netlink: 'syz.5.1978': attribute type 5 has an invalid length. [ 337.492511][T13729] vxlan0: entered promiscuous mode [ 337.501146][T13729] vxlan0: entered allmulticast mode [ 337.508526][ T9825] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.520488][ T9825] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.550445][ T9825] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.562129][ T9825] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.632598][T13731] netlink: 'syz.5.1980': attribute type 1 has an invalid length. [ 337.641109][T13731] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1980'. [ 338.060320][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 338.087726][T13742] syzkaller1: entered promiscuous mode [ 338.093305][T13742] syzkaller1: entered allmulticast mode [ 338.104224][T13742] netlink: 'syz.0.1984': attribute type 7 has an invalid length. [ 338.112295][T13742] netlink: 'syz.0.1984': attribute type 8 has an invalid length. [ 338.601813][T13761] nbd: couldn't find device at index 536870912 [ 338.650130][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 338.724596][T13770] netlink: 'syz.7.1990': attribute type 25 has an invalid length. [ 338.732954][T13770] netlink: 'syz.7.1990': attribute type 7 has an invalid length. [ 338.983569][T13774] netlink: 'syz.7.1991': attribute type 3 has an invalid length. [ 339.009665][T13776] lo speed is unknown, defaulting to 1000 [ 339.045308][T13777] lo speed is unknown, defaulting to 1000 [ 339.062168][T13776] wg1 speed is unknown, defaulting to 1000 [ 339.087218][T13777] wg1 speed is unknown, defaulting to 1000 [ 339.091063][T13590] Set syz1 is full, maxelem 65536 reached [ 339.143396][T13782] syzkaller1: entered promiscuous mode [ 339.149297][T13782] syzkaller1: entered allmulticast mode [ 339.397980][T13782] lo speed is unknown, defaulting to 1000 [ 339.409252][T13782] wg1 speed is unknown, defaulting to 1000 [ 339.761887][T13800] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 340.002619][T13813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2003'. [ 340.040555][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2002'. [ 340.251664][T13832] lo speed is unknown, defaulting to 1000 [ 340.269108][T13832] wg1 speed is unknown, defaulting to 1000 [ 340.526274][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'. [ 341.719631][T13851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.741088][T13856] tap0: tun_chr_ioctl cmd 1074025677 [ 341.762163][T13856] tap0: linktype set to 0 [ 341.877220][T13847] lo speed is unknown, defaulting to 1000 [ 341.910116][T13847] wg1 speed is unknown, defaulting to 1000 [ 342.157197][T13879] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2014'. [ 342.170462][T13888] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2014'. [ 342.221215][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 342.260486][T13881] bond12: entered promiscuous mode [ 342.266091][T13881] bond12: entered allmulticast mode [ 342.272907][T13881] 8021q: adding VLAN 0 to HW filter on device bond12 [ 342.351421][T13890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.370174][T13874] lo speed is unknown, defaulting to 1000 [ 342.379191][T13874] wg1 speed is unknown, defaulting to 1000 [ 342.517759][T13898] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2020'. [ 342.532584][T13898] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2020'. [ 342.608079][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2020'. [ 342.675302][T13903] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 342.707085][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2022'. [ 342.869544][T13909] lo speed is unknown, defaulting to 1000 [ 342.906395][T13909] wg1 speed is unknown, defaulting to 1000 [ 342.989113][T13914] lo speed is unknown, defaulting to 1000 [ 343.026791][T13914] wg1 speed is unknown, defaulting to 1000 [ 343.295297][ T9825] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 343.323179][T13931] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 343.333606][T13931] bridge1: entered allmulticast mode [ 343.336858][T13927] nbd7: detected capacity change from 0 to 63 [ 343.362111][T13932] block nbd7: NBD_DISCONNECT [ 343.397564][T13932] block nbd7: Disconnected due to user request. [ 343.419952][T13932] block nbd7: shutting down sockets [ 343.429901][T13923] bond1: entered promiscuous mode [ 343.441062][T13923] bond1: entered allmulticast mode [ 343.451541][T13923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.520921][T13945] netlink: 'syz.0.2033': attribute type 13 has an invalid length. [ 343.536658][T13945] netlink: 'syz.0.2033': attribute type 17 has an invalid length. [ 343.656923][T13945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.668484][T13945] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.680833][T13945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.701405][ T5962] lo speed is unknown, defaulting to 1000 [ 343.709383][ T9825] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.719050][ T5962] syz2: Port: 1 Link ACTIVE [ 343.819614][T13952] lo speed is unknown, defaulting to 1000 [ 343.829428][T13952] wg1 speed is unknown, defaulting to 1000 [ 343.860729][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2037'. [ 343.870057][T13958] netlink: 'syz.7.2037': attribute type 5 has an invalid length. [ 343.878031][T13958] netlink: 'syz.7.2037': attribute type 8 has an invalid length. [ 343.885969][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2037'. [ 343.926501][T13958] geneve3: entered promiscuous mode [ 343.931742][T13958] geneve3: entered allmulticast mode [ 343.948213][ T9825] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 343.968528][ T9825] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 344.003687][ T9825] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 344.022358][ T9825] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 344.086947][T13965] lo speed is unknown, defaulting to 1000 [ 344.114975][T13965] wg1 speed is unknown, defaulting to 1000 [ 344.406312][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2047'. [ 344.425839][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2047'. [ 344.437676][T14001] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2047'. [ 344.619649][T14012] netlink: 'syz.7.2052': attribute type 1 has an invalid length. [ 344.661209][T14012] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 344.671619][T14012] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 344.685922][T14012] bond2: (slave vcan1): making interface the new active one [ 344.694781][T14012] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 344.711894][T14012] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 344.725371][T14012] bond2: (slave vcan2): Enslaving as a backup interface with an up link [ 344.813346][T14016] lo speed is unknown, defaulting to 1000 [ 344.821943][T14016] wg1 speed is unknown, defaulting to 1000 [ 345.197007][T14036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.317211][T14036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.428550][T14036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.560289][T14036] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.697880][ T9825] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.747240][ T9825] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.887892][ T9825] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.929616][ T9825] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.947538][T14062] syz_tun: entered allmulticast mode [ 346.068532][T14065] lo speed is unknown, defaulting to 1000 [ 346.082966][T14062] lo speed is unknown, defaulting to 1000 [ 346.115982][T14070] netlink: 'syz.5.2066': attribute type 23 has an invalid length. [ 346.125197][T14065] wg1 speed is unknown, defaulting to 1000 [ 346.160562][T14073] can: request_module (can-proto-4) failed. [ 346.208765][T14062] wg1 speed is unknown, defaulting to 1000 [ 346.352142][T14068] lo speed is unknown, defaulting to 1000 [ 346.363184][T14061] syz_tun: left allmulticast mode [ 346.381025][T14068] wg1 speed is unknown, defaulting to 1000 [ 346.801933][T14082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.817568][T14082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.055263][T14093] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.170669][T14082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.205866][T14082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.373724][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.422397][T14093] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.554692][T14082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.575030][T14082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 347.625459][T14093] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.895204][T14082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.964026][T14082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 348.030934][T14093] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.209303][ T9796] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.313849][ T9796] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 348.326018][ T9796] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 348.357722][ T9825] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.367795][ T9825] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 348.376247][ T9825] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 348.397577][ T9825] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.406384][ T9825] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.441104][ T9825] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 348.445668][T14127] __nla_validate_parse: 4 callbacks suppressed [ 348.445686][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 348.465596][ T9825] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 348.484227][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 348.557445][T14133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 348.620659][ T9825] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 348.639269][ T9825] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 348.688595][T14127] syzkaller1: entered promiscuous mode [ 348.696161][T14127] syzkaller1: entered allmulticast mode [ 348.704159][T14129] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2079'. [ 348.713737][T14132] lo speed is unknown, defaulting to 1000 [ 348.743096][T14132] wg1 speed is unknown, defaulting to 1000 [ 348.745963][T14135] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 348.801870][T14144] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 348.823270][T14144] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2082'. [ 348.886151][T14149] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2083'. [ 348.990994][T14151] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2083'. [ 349.078927][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 349.150854][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'. [ 349.164453][T14160] ip6gretap0: entered promiscuous mode [ 349.172377][T14160] ip6gretap0: left promiscuous mode [ 349.781542][T14187] delete_channel: no stack [ 349.966956][T14196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.978353][T14196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.179710][T14196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.195216][T14196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.228529][T14200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.256425][ T5931] lo speed is unknown, defaulting to 1000 [ 350.262197][ T5931] syz2: Port: 1 Link DOWN [ 350.277433][T14209] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 350.285646][T14209] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 350.294646][T14209] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 350.302414][T14209] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 350.310529][T14209] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 350.318426][T14209] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 350.331078][T14196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.347888][T14196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.429720][T14196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.440516][T14196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.499638][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'. [ 350.511836][T14213] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 350.569787][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.581085][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.607006][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.615755][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.655826][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.664816][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.687547][ T9825] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.696012][ T9825] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.705006][T14217] lo speed is unknown, defaulting to 1000 [ 350.722396][T14217] wg1 speed is unknown, defaulting to 1000 [ 350.760316][T14220] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 350.825292][T14217] tipc: can't start tipc receive workqueue [ 350.957780][T14224] nbd: socks must be embedded in a SOCK_ITEM attr [ 351.319024][T14235] sctp: [Deprecated]: syz.5.2107 (pid 14235) Use of int in maxseg socket option. [ 351.319024][T14235] Use struct sctp_assoc_value instead [ 351.455091][T14245] IPv6: Can't replace route, no match found [ 351.884004][T14274] bridge_slave_1: left allmulticast mode [ 351.889693][T14274] bridge_slave_1: left promiscuous mode [ 351.902515][T14274] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.920359][T14274] bridge_slave_0: left allmulticast mode [ 351.926880][T14274] bridge_slave_0: left promiscuous mode [ 351.932671][T14274] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.065882][T14281] ÿ: renamed from bond_slave_0 [ 353.013096][T14312] lo speed is unknown, defaulting to 1000 [ 353.019978][T14312] wg1 speed is unknown, defaulting to 1000 [ 353.269727][T14317] netlink: 'syz.2.2133': attribute type 83 has an invalid length. [ 353.413325][T14325] lo speed is unknown, defaulting to 1000 [ 353.420893][T14325] wg1 speed is unknown, defaulting to 1000 [ 353.730648][T14337] __nla_validate_parse: 9 callbacks suppressed [ 353.730661][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 353.867531][T14340] lo speed is unknown, defaulting to 1000 [ 353.875203][T14340] wg1 speed is unknown, defaulting to 1000 [ 353.978501][T14339] lo speed is unknown, defaulting to 1000 [ 354.031550][T14339] wg1 speed is unknown, defaulting to 1000 [ 354.265137][T14348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2142'. [ 354.415861][T14354] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2144'. [ 354.457155][T14356] netlink: 'syz.2.2145': attribute type 1 has an invalid length. [ 354.480873][T14356] 8021q: adding VLAN 0 to HW filter on device bond11 [ 354.500629][T14356] bond11: (slave ip6erspan0): making interface the new active one [ 354.510296][T14356] bond11: (slave ip6erspan0): Enslaving as an active interface with an up link [ 355.104906][T14374] lo speed is unknown, defaulting to 1000 [ 355.112368][T14374] wg1 speed is unknown, defaulting to 1000 [ 355.378010][T14391] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2154'. [ 355.381370][T14386] tipc: Enabled bearer , priority 0 [ 355.399993][T14386] syzkaller0: entered promiscuous mode [ 355.407098][T14386] syzkaller0: entered allmulticast mode [ 355.438617][T14386] tipc: Resetting bearer [ 355.453716][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 355.470774][T14386] veth8: entered allmulticast mode [ 355.545585][T14385] tipc: Resetting bearer [ 355.570122][T14385] tipc: Disabling bearer [ 355.582763][T14397] lo speed is unknown, defaulting to 1000 [ 355.590254][T14397] wg1 speed is unknown, defaulting to 1000 [ 355.837490][T14402] delete_channel: no stack [ 355.948844][T14407] vlan1: entered allmulticast mode [ 356.423785][ T51] Bluetooth: hci7: command 0x0405 tx timeout [ 357.004977][T14424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2163'. [ 357.090012][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 357.099902][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2164'. [ 357.112318][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2164'. [ 357.122720][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2164'. [ 357.133939][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2164'. [ 358.225189][ T36] nci: nci_rx_work: unknown MT 0x1 [ 358.292794][ T24] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 358.306517][ T24] hid-generic 0005:0007:0008.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 358.331472][T14487] lo speed is unknown, defaulting to 1000 [ 358.339064][T14487] wg1 speed is unknown, defaulting to 1000 [ 358.573213][T14499] syzkaller0: entered promiscuous mode [ 358.579102][T14499] syzkaller0: entered allmulticast mode [ 358.631623][T14508] syzkaller0: entered promiscuous mode [ 358.638294][T14508] syzkaller0: entered allmulticast mode [ 358.739138][T14511] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 359.198683][T14521] tipc: Enabling of bearer rejected, failed to enable media [ 359.221003][T14524] sctp: [Deprecated]: syz.2.2189 (pid 14524) Use of int in max_burst socket option deprecated. [ 359.221003][T14524] Use struct sctp_assoc_value instead [ 359.454486][T14540] sctp: [Deprecated]: syz.5.2191 (pid 14540) Use of int in max_burst socket option. [ 359.454486][T14540] Use struct sctp_assoc_value instead [ 360.411242][T14558] veth1_to_team: entered promiscuous mode [ 360.419036][T14558] bond0: entered promiscuous mode [ 360.424182][T14558] ÿ: entered promiscuous mode [ 360.429071][T14558] bond_slave_1: entered promiscuous mode [ 360.435102][T14558] !: entered promiscuous mode [ 360.441173][T14558] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 360.451947][T14558] hsr1: entered allmulticast mode [ 360.457009][T14558] veth1_to_team: entered allmulticast mode [ 360.462816][T14558] bond0: entered allmulticast mode [ 360.468207][T14558] ÿ: entered allmulticast mode [ 360.473062][T14558] bond_slave_1: entered allmulticast mode [ 360.478864][T14558] !: entered allmulticast mode [ 360.682912][T14568] netlink: 'syz.2.2198': attribute type 1 has an invalid length. [ 361.898309][T14568] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 362.034618][T14580] __nla_validate_parse: 64 callbacks suppressed [ 362.034639][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 362.058814][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 362.077780][T14582] netlink: 'syz.5.2202': attribute type 21 has an invalid length. [ 362.089142][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 362.195021][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2203'. [ 362.212160][T14587] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 362.233806][T14585] erspan0: entered promiscuous mode [ 362.240147][T14585] macvtap1: entered promiscuous mode [ 362.245809][T14585] macvtap1: entered allmulticast mode [ 362.251190][T14585] erspan0: entered allmulticast mode [ 362.293321][T14587] bond14: entered promiscuous mode [ 362.298869][T14587] bond14: entered allmulticast mode [ 362.308398][T14585] erspan0: left allmulticast mode [ 362.313915][T14585] erspan0: left promiscuous mode [ 362.651074][T14608] lo speed is unknown, defaulting to 1000 [ 362.682413][T14608] wg1 speed is unknown, defaulting to 1000 [ 362.770978][T14615] lo speed is unknown, defaulting to 1000 [ 362.809531][T14619] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2210'. [ 362.825424][T14619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2210'. [ 362.848397][T14615] wg1 speed is unknown, defaulting to 1000 [ 362.995569][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 363.005777][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 363.018490][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 363.028363][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 363.036880][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 363.209812][T14637] syzkaller0: left promiscuous mode [ 363.215510][T14637] syzkaller0: left allmulticast mode [ 363.226730][T14638] sctp: [Deprecated]: syz.2.2216 (pid 14638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.226730][T14638] Use struct sctp_sack_info instead [ 363.287064][T14626] lo speed is unknown, defaulting to 1000 [ 363.309281][T14626] wg1 speed is unknown, defaulting to 1000 [ 363.313215][T14640] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 363.366835][T14644] netlink: 'syz.5.2218': attribute type 21 has an invalid length. [ 363.396881][T14644] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2218'. [ 363.456646][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 363.701648][T14660] netlink: 'syz.5.2222': attribute type 16 has an invalid length. [ 363.709665][T14660] netlink: 'syz.5.2222': attribute type 17 has an invalid length. [ 364.186088][ T5865] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.195281][ T5865] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.204071][ T5865] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.212130][ T5865] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.221634][ T5865] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 364.407787][T14660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.431655][T14660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.619525][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2222'. [ 364.715298][T13491] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.731632][T13491] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.750616][T13491] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.767503][T13491] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.770092][T14676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2224'. [ 364.834626][T13491] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.843058][T13491] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.859716][T13491] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.879995][T13491] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.960167][T14626] chnl_net:caif_netlink_parms(): no params data found [ 364.992953][T14666] lo speed is unknown, defaulting to 1000 [ 365.041062][T14685] nbd: must specify a size in bytes for the device [ 365.069337][ T51] Bluetooth: hci8: command tx timeout [ 365.101539][T14666] wg1 speed is unknown, defaulting to 1000 [ 365.405814][T14626] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.414456][T14626] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.421816][T14626] bridge_slave_0: entered allmulticast mode [ 365.429946][T14626] bridge_slave_0: entered promiscuous mode [ 365.446371][T14626] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.453822][T14626] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.461164][T14626] bridge_slave_1: entered allmulticast mode [ 365.469331][T14626] bridge_slave_1: entered promiscuous mode [ 365.547063][T14626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.565514][T14626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.579411][T14708] IPVS: length: 24 != 16106127384 [ 365.587305][T14707] IPVS: length: 24 != 16106127384 [ 365.719743][T14626] team0: Port device team_slave_0 added [ 365.740261][T14626] team0: Port device team_slave_1 added [ 365.814047][T14626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.821666][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.848011][T14626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.860735][T14626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.868090][T14626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.894708][T14626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.002253][T14626] hsr_slave_0: entered promiscuous mode [ 366.009432][T14626] hsr_slave_1: entered promiscuous mode [ 366.022363][T14626] debugfs: 'hsr0' already exists in 'hsr' [ 366.029482][T14626] Cannot create hsr debugfs directory [ 366.036788][T14666] chnl_net:caif_netlink_parms(): no params data found [ 366.253820][ T51] Bluetooth: hci9: command tx timeout [ 366.381492][T14666] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.389641][T14666] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.397445][T14666] bridge_slave_0: entered allmulticast mode [ 366.405227][T14666] bridge_slave_0: entered promiscuous mode [ 366.433960][T14666] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.441476][T14666] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.449128][T14666] bridge_slave_1: entered allmulticast mode [ 366.459461][T14666] bridge_slave_1: entered promiscuous mode [ 366.562352][T14666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.582486][T14732] lo speed is unknown, defaulting to 1000 [ 366.588241][T14666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.623671][T14732] wg1 speed is unknown, defaulting to 1000 [ 366.648948][T14736] team0: Device gtp0 is up. Set it down before adding it as a team port [ 366.692805][T14666] team0: Port device team_slave_0 added [ 366.701273][T14666] team0: Port device team_slave_1 added [ 366.791890][T14666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.799023][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.825446][T14666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.842353][T14666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.849906][T14666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.875962][T14666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.977682][T14743] netlink: 'syz.0.2246': attribute type 20 has an invalid length. [ 367.135601][ T51] Bluetooth: hci8: command tx timeout [ 367.196688][T14758] __nla_validate_parse: 5 callbacks suppressed [ 367.196707][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 367.412412][T14763] netlink: 'syz.2.2250': attribute type 4 has an invalid length. [ 367.480695][T14766] netlink: 'syz.2.2250': attribute type 4 has an invalid length. [ 367.660859][T14666] hsr_slave_0: entered promiscuous mode [ 367.669884][T14666] hsr_slave_1: entered promiscuous mode [ 367.677602][T14666] debugfs: 'hsr0' already exists in 'hsr' [ 367.683346][T14666] Cannot create hsr debugfs directory [ 367.692014][T14626] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.723284][T14626] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.790348][T14626] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.807325][T14626] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.819937][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'. [ 368.018605][T14785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2255'. [ 368.045522][T14785] xfrm1: entered allmulticast mode [ 368.050973][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 368.187005][T14783] lo speed is unknown, defaulting to 1000 [ 368.196550][T14783] wg1 speed is unknown, defaulting to 1000 [ 368.335272][ T51] Bluetooth: hci9: command tx timeout [ 368.339281][T14626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.391084][T14783] netlink: 'syz.0.2256': attribute type 6 has an invalid length. [ 368.539876][T14666] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 368.556273][T14626] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.565246][T14666] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 368.590723][T14666] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 368.625583][T13490] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.632739][T13490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.665927][T14666] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 368.677099][ T5938] hid-generic 0005:0007:0008.0003: unknown main item tag 0x0 [ 368.692214][ T5938] hid-generic 0005:0007:0008.0003: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 368.721031][T13490] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.728236][T13490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.107659][T14666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.218460][ T51] Bluetooth: hci8: command tx timeout [ 369.241382][T14666] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.392953][ T9825] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.400227][ T9825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.419176][T14819] lo speed is unknown, defaulting to 1000 [ 369.435646][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.442773][ T9796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.459198][T14819] wg1 speed is unknown, defaulting to 1000 [ 369.573816][T14626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.173780][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 370.189447][T14858] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:5 [ 370.204235][T14850] lo speed is unknown, defaulting to 1000 [ 370.211711][T14850] wg1 speed is unknown, defaulting to 1000 [ 370.305040][T14666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.412424][T14626] veth0_vlan: entered promiscuous mode [ 370.419864][ T51] Bluetooth: hci9: command tx timeout [ 370.446561][T14626] veth1_vlan: entered promiscuous mode [ 370.579857][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 370.622932][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2273'. [ 370.631611][T14626] veth0_macvtap: entered promiscuous mode [ 370.640113][T14873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2273'. [ 370.651147][T14873] netlink: 532 bytes leftover after parsing attributes in process `syz.0.2273'. [ 370.676454][T14626] veth1_macvtap: entered promiscuous mode [ 370.719985][T14626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.760245][T14626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.811566][T13492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.849279][T13492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.871229][T13492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.901388][T13492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.027617][T14666] veth0_vlan: entered promiscuous mode [ 371.094357][T13490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.102206][T13490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.109898][T14666] veth1_vlan: entered promiscuous mode [ 371.202002][T13490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.232445][T13490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.296525][T14666] veth0_macvtap: entered promiscuous mode [ 371.304044][ T51] Bluetooth: hci8: command tx timeout [ 371.328458][T14666] veth1_macvtap: entered promiscuous mode [ 371.360325][T14666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.412558][T14666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.481906][T13489] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.495991][T13489] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.518314][T13489] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.536722][T13489] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.689271][T14914] lo speed is unknown, defaulting to 1000 [ 371.744112][T14914] wg1 speed is unknown, defaulting to 1000 [ 371.814104][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.821949][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.894547][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2289'. [ 371.922178][ T9796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.937310][ T9796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.999239][T14923] netlink: 'syz.2.2289': attribute type 2 has an invalid length. [ 372.494512][ T51] Bluetooth: hci9: command tx timeout [ 372.515261][T14930] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2221'. [ 372.578234][T14949] netlink: 'syz.2.2296': attribute type 83 has an invalid length. [ 372.611951][T14949] lo speed is unknown, defaulting to 1000 [ 372.620903][T14949] wg1 speed is unknown, defaulting to 1000 [ 372.835472][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2300'. [ 372.857695][T14961] bridge_slave_1: left allmulticast mode [ 372.863900][T14961] bridge_slave_1: left promiscuous mode [ 372.869701][T14961] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.888408][T14961] bridge_slave_0: left allmulticast mode [ 372.904931][T14961] bridge_slave_0: left promiscuous mode [ 372.911106][T14961] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.335729][T14967] syzkaller1: entered promiscuous mode [ 373.351833][T14967] syzkaller1: entered allmulticast mode [ 373.456013][T14978] lo speed is unknown, defaulting to 1000 [ 373.473982][T14978] wg1 speed is unknown, defaulting to 1000 [ 373.487704][T14971] lo speed is unknown, defaulting to 1000 [ 373.558858][T14971] wg1 speed is unknown, defaulting to 1000 [ 373.608203][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2304'. [ 373.642287][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.650931][T14982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.659470][T14982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.667415][T14982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.148483][T14997] netlink: 'syz.9.2307': attribute type 3 has an invalid length. [ 374.431809][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 374.649522][T15028] delete_channel: no stack [ 375.179924][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'. [ 375.293861][T13490] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.571181][T15083] netlink: 'syz.2.2329': attribute type 66 has an invalid length. [ 375.788332][T15091] lo: entered promiscuous mode [ 375.793288][T15091] lo: entered allmulticast mode [ 375.813900][T15091] tunl0: entered promiscuous mode [ 375.824210][T15091] tunl0: entered allmulticast mode [ 375.830116][T15091] gre0: entered promiscuous mode [ 375.835564][T15091] gre0: entered allmulticast mode [ 375.852069][T15091] gretap0: entered promiscuous mode [ 375.869285][T15091] gretap0: entered allmulticast mode [ 375.878325][T15091] erspan0: entered promiscuous mode [ 375.937043][T15091] erspan0: entered allmulticast mode [ 375.951264][T15091] ip_vti0: entered promiscuous mode [ 375.965668][T15091] ip_vti0: entered allmulticast mode [ 375.977465][T15091] ip6_vti0: entered promiscuous mode [ 375.978025][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2337'. [ 375.993108][T15091] ip6_vti0: entered allmulticast mode [ 375.999754][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2337'. [ 375.999861][T15091] sit0: entered promiscuous mode [ 376.017389][T15091] sit0: entered allmulticast mode [ 376.023103][T15091] ip6tnl0: entered promiscuous mode [ 376.029321][T15091] ip6tnl0: entered allmulticast mode [ 376.038446][T15091] ip6gre0: entered promiscuous mode [ 376.044079][T15091] ip6gre0: entered allmulticast mode [ 376.064312][T15091] ip6gretap0: entered promiscuous mode [ 376.073250][T15091] ip6gretap0: entered allmulticast mode [ 376.084110][T15091] vcan0: entered promiscuous mode [ 376.092563][T15091] vcan0: entered allmulticast mode [ 376.106275][T15091] bond0: entered promiscuous mode [ 376.112228][T15091] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 376.122914][T15091] bond0: entered allmulticast mode [ 376.128316][T15091] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 376.136754][T15091] team0: entered promiscuous mode [ 376.141902][T15091] team0: entered allmulticast mode [ 376.151808][T15091] dummy0: entered promiscuous mode [ 376.157442][T15091] dummy0: entered allmulticast mode [ 376.165670][T15091] nlmon0: entered promiscuous mode [ 376.170856][T15091] nlmon0: entered allmulticast mode [ 376.177215][T15091] caif0: entered promiscuous mode [ 376.182304][T15091] caif0: entered allmulticast mode [ 376.189374][T15091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.206302][T10371] lo speed is unknown, defaulting to 1000 [ 376.219933][T10371] syz2: Port: 1 Link ACTIVE [ 376.400197][T15132] netlink: 'syz.0.2343': attribute type 13 has an invalid length. [ 376.411696][T15132] netlink: 'syz.0.2343': attribute type 17 has an invalid length. [ 376.556213][T15142] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.2340'. [ 376.627256][T15132] lo: left promiscuous mode [ 376.652519][T15132] lo: left allmulticast mode [ 376.690368][T15132] tunl0: left promiscuous mode [ 376.706074][T15132] tunl0: left allmulticast mode [ 376.716334][T15132] gre0: left promiscuous mode [ 376.721048][T15132] gre0: left allmulticast mode [ 376.755744][T15132] gretap0: left promiscuous mode [ 376.761298][T15132] gretap0: left allmulticast mode [ 376.779571][T15132] erspan0: left promiscuous mode [ 376.795911][T15132] erspan0: left allmulticast mode [ 376.807894][T15132] ip_vti0: left promiscuous mode [ 376.828519][T15132] ip_vti0: left allmulticast mode [ 376.839504][T15132] ip6_vti0: left promiscuous mode [ 376.845747][T15132] ip6_vti0: left allmulticast mode [ 376.855752][T15132] sit0: left promiscuous mode [ 376.860686][T15132] sit0: left allmulticast mode [ 376.867881][T15132] ip6tnl0: left promiscuous mode [ 376.873106][T15132] ip6tnl0: left allmulticast mode [ 376.885445][T15132] ip6gre0: left promiscuous mode [ 376.890979][T15132] ip6gre0: left allmulticast mode [ 376.898204][T15132] ip6gretap0: left promiscuous mode [ 376.904180][T15132] ip6gretap0: left allmulticast mode [ 376.917729][T15132] vcan0: left promiscuous mode [ 376.922710][T15132] vcan0: left allmulticast mode [ 376.936207][T15132] bond0: left promiscuous mode [ 376.941010][T15132] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 376.955907][T15132] bond0: left allmulticast mode [ 376.971246][T15132] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 377.099193][T15132] team0: left promiscuous mode [ 377.104408][T15132] team0: left allmulticast mode [ 377.111532][T15132] dummy0: left promiscuous mode [ 377.116874][T15132] dummy0: left allmulticast mode [ 377.124485][T15132] nlmon0: left promiscuous mode [ 377.129380][T15132] nlmon0: left allmulticast mode [ 377.148607][T15132] caif0: left promiscuous mode [ 377.155007][T15132] caif0: left allmulticast mode [ 377.160311][T15132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.498828][T15174] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2353'. [ 377.765339][T15190] netlink: 'syz.5.2358': attribute type 2 has an invalid length. [ 377.793873][T15190] netlink: 119 bytes leftover after parsing attributes in process `syz.5.2358'. [ 377.966781][T15197] netlink: 'syz.5.2360': attribute type 1 has an invalid length. [ 377.990779][T15197] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2360'. [ 378.163397][T15206] netlink: 830 bytes leftover after parsing attributes in process `syz.9.2364'. [ 378.176121][ T51] Bluetooth: hci9: command tx timeout [ 378.282106][T15218] pim6reg1: entered promiscuous mode [ 378.287690][T15218] pim6reg1: entered allmulticast mode [ 378.366142][T15221] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2368'. [ 378.402456][T15221] nbd: socks must be embedded in a SOCK_ITEM attr [ 378.507798][ T1301] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 378.611735][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 378.697224][T15239] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 378.716657][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2375'. [ 378.737307][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2375'. [ 378.757003][T15239] bridge1: entered promiscuous mode [ 378.764857][T15239] bridge1: entered allmulticast mode [ 378.774966][T15239] team0: Port device bridge1 added [ 379.172350][T15262] bridge2: entered allmulticast mode [ 379.230597][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.266023][T15260] bond0: (slave rose0): Enslaving as an active interface with an up link [ 379.395550][T15271] tipc: Enabling of bearer rejected, already enabled [ 379.445560][T15271] syzkaller0: entered promiscuous mode [ 379.451073][T15271] syzkaller0: entered allmulticast mode [ 379.469306][T15268] lo speed is unknown, defaulting to 1000 [ 379.477844][T15275] vti0: entered promiscuous mode [ 379.511670][T15268] wg1 speed is unknown, defaulting to 1000 [ 379.867401][T15295] GUP no longer grows the stack in syz.9.2394 (15295): 200000003000-20000000a000 (200000001000) [ 379.878816][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.9.2394 Not tainted syzkaller #0 PREEMPT(full) [ 379.878844][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.878860][T15295] Call Trace: [ 379.878871][T15295] [ 379.878880][T15295] dump_stack_lvl+0x189/0x250 [ 379.878910][T15295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.878933][T15295] ? __pfx__printk+0x10/0x10 [ 379.878954][T15295] ? find_vma+0xe7/0x160 [ 379.878978][T15295] ? __schedule+0x17ae/0x4cc0 [ 379.879010][T15295] __get_user_pages+0x24d0/0x2ce0 [ 379.879035][T15295] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 379.879091][T15295] ? rcu_is_watching+0x15/0xb0 [ 379.879115][T15295] __gup_longterm_locked+0xde9/0x1660 [ 379.879148][T15295] ? sanity_check_pinned_pages+0x123a/0x1300 [ 379.879182][T15295] gup_fast_fallback+0x1e6a/0x2010 [ 379.879243][T15295] ? __pfx_gup_fast_fallback+0x10/0x10 [ 379.879263][T15295] ? stack_trace_save+0x9c/0xe0 [ 379.879285][T15295] ? __pfx_stack_trace_save+0x10/0x10 [ 379.879319][T15295] ? pin_user_pages_fast+0x4d/0xb0 [ 379.879346][T15295] iov_iter_extract_pages+0x35a/0x5e0 [ 379.879381][T15295] extract_iter_to_sg+0xe46/0x24e0 [ 379.879420][T15295] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 379.879462][T15295] ? __asan_memset+0x22/0x50 [ 379.879486][T15295] af_alg_get_rsgl+0x436/0x810 [ 379.879532][T15295] aead_recvmsg+0x4d5/0x13b0 [ 379.879570][T15295] ? aa_sk_perm+0x81e/0x950 [ 379.879612][T15295] ? __pfx_aead_recvmsg+0x10/0x10 [ 379.879646][T15295] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 379.879667][T15295] ? __pfx_aead_recvmsg+0x10/0x10 [ 379.879706][T15295] sock_recvmsg_nosec+0x183/0x1c0 [ 379.879732][T15295] ____sys_recvmsg+0x3aa/0x460 [ 379.879774][T15295] ? __pfx_____sys_recvmsg+0x10/0x10 [ 379.879820][T15295] ? import_iovec+0x74/0xa0 [ 379.879848][T15295] ___sys_recvmsg+0x1b5/0x510 [ 379.879883][T15295] ? __pfx____sys_recvmsg+0x10/0x10 [ 379.879946][T15295] ? __might_fault+0xb0/0x130 [ 379.879977][T15295] do_recvmmsg+0x307/0x770 [ 379.880014][T15295] ? __pfx_do_recvmmsg+0x10/0x10 [ 379.880038][T15295] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 379.880082][T15295] ? __pfx_do_futex+0x10/0x10 [ 379.880125][T15295] __x64_sys_recvmmsg+0x190/0x240 [ 379.880156][T15295] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 379.880181][T15295] ? rcu_is_watching+0x15/0xb0 [ 379.880205][T15295] ? do_syscall_64+0xbe/0x3b0 [ 379.880233][T15295] do_syscall_64+0xfa/0x3b0 [ 379.880254][T15295] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.880275][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.880294][T15295] ? clear_bhb_loop+0x60/0xb0 [ 379.880319][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.880338][T15295] RIP: 0033:0x7f952e58eec9 [ 379.880356][T15295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.880374][T15295] RSP: 002b:00007f952f511038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 379.880396][T15295] RAX: ffffffffffffffda RBX: 00007f952e7e5fa0 RCX: 00007f952e58eec9 [ 379.880412][T15295] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b [ 379.880425][T15295] RBP: 00007f952e611f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.880438][T15295] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 379.880450][T15295] R13: 00007f952e7e6038 R14: 00007f952e7e5fa0 R15: 00007ffde9b67878 [ 379.880485][T15295] [ 380.593332][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 380.890721][T15334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2405'. [ 380.900717][T15334] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2405'. [ 381.047796][T15349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.071839][T15351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.267108][T15358] lo speed is unknown, defaulting to 1000 [ 381.301315][T15358] wg1 speed is unknown, defaulting to 1000 [ 381.405572][T15372] netlink: 'syz.0.2415': attribute type 10 has an invalid length. [ 381.431337][T15372] team0: entered promiscuous mode [ 381.943016][T15385] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.079199][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.101523][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.272140][T15385] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.408292][T15385] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.542569][T15385] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.825591][T15420] lo speed is unknown, defaulting to 1000 [ 382.833052][T15420] wg1 speed is unknown, defaulting to 1000 [ 383.411816][T15438] geneve3: entered promiscuous mode [ 383.424724][T15438] geneve3: entered allmulticast mode [ 383.588722][T15440] bridge0: entered allmulticast mode [ 383.909628][T15469] vxcan1: entered allmulticast mode [ 383.946224][T15457] lo speed is unknown, defaulting to 1000 [ 384.077142][T15469] vxcan1: left allmulticast mode [ 384.091743][T15457] wg1 speed is unknown, defaulting to 1000 [ 384.330706][T15488] __nla_validate_parse: 4 callbacks suppressed [ 384.330724][T15488] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2439'. [ 384.386847][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2439'. [ 384.402253][T15488] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2439'. [ 384.788233][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 384.860618][T15509] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 384.869884][T10379] IPVS: starting estimator thread 0... [ 385.003860][T15520] IPVS: using max 29 ests per chain, 69600 per kthread [ 385.234166][T15505] lo speed is unknown, defaulting to 1000 [ 385.266231][T15505] wg1 speed is unknown, defaulting to 1000 [ 385.851087][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 385.884693][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2456'. [ 385.902520][T15545] netlink: 'syz.2.2456': attribute type 18 has an invalid length. [ 386.084294][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2460'. [ 386.115340][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 386.133569][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'. [ 386.152989][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 386.974767][T15584] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 386.987156][T15585] netlink: 'syz.2.2468': attribute type 4 has an invalid length. [ 387.290069][T15598] netlink: 'syz.0.2474': attribute type 12 has an invalid length. [ 387.501278][T15611] syzkaller1: entered promiscuous mode [ 387.515138][T15611] syzkaller1: entered allmulticast mode [ 387.741187][T15616] dvmrp8: entered allmulticast mode [ 387.825221][T15616] lo speed is unknown, defaulting to 1000 [ 387.846063][ T30] audit: type=1804 audit(1759281476.099:9): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2476" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=887 res=1 errno=0 [ 387.869144][ T30] audit: type=1800 audit(1759281476.109:10): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2476" name="cgroup.controllers" dev="tmpfs" ino=887 res=0 errno=0 [ 387.915694][T15626] netlink: 'syz.8.2480': attribute type 1 has an invalid length. [ 387.930361][ T30] audit: type=1800 audit(1759281476.109:11): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2476" name="cgroup.controllers" dev="tmpfs" ino=887 res=0 errno=0 [ 388.159555][T15616] wg1 speed is unknown, defaulting to 1000 [ 388.451034][T15626] dvmrp8: left allmulticast mode [ 388.748434][T15647] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 388.779327][T15648] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 388.831768][T15647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.877341][T15651] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 388.931690][T15651] bond2: (slave batadv1): making interface the new active one [ 388.941393][T15651] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 388.964398][T15654] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 389.257760][T15647] bond2 (unregistering): (slave batadv1): Releasing active interface [ 389.304885][T15647] bond2 (unregistering): Released all slaves [ 389.330158][T15664] netlink: 'syz.0.2493': attribute type 2 has an invalid length. [ 389.415337][T15664] __nla_validate_parse: 9 callbacks suppressed [ 389.415359][T15664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2493'. [ 389.521747][T15664] : entered promiscuous mode [ 389.662262][T15680] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2498'. [ 389.688682][T15680] batadv1: entered promiscuous mode [ 389.701570][T15680] batadv1: entered allmulticast mode [ 389.836866][T15686] lo speed is unknown, defaulting to 1000 [ 389.874622][T15686] wg1 speed is unknown, defaulting to 1000 [ 389.912706][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2502'. [ 389.968789][T15700] netlink: 'syz.8.2504': attribute type 1 has an invalid length. [ 389.977986][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2504'. [ 390.030143][T15698] batadv1: entered promiscuous mode [ 390.035957][T15698] batadv1: entered allmulticast mode [ 390.047533][T15704] Bluetooth: MGMT ver 1.23 [ 390.122077][T15704] geneve3: entered promiscuous mode [ 390.255731][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2506'. [ 390.274006][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 390.290462][T15713] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 390.418999][T15720] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 390.629818][T15732] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2510'. [ 390.693360][T15734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.805993][T15739] lo speed is unknown, defaulting to 1000 [ 390.903968][T15739] wg1 speed is unknown, defaulting to 1000 [ 390.950511][T15742] lo speed is unknown, defaulting to 1000 [ 390.987352][T15757] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2513'. [ 391.011398][T15742] wg1 speed is unknown, defaulting to 1000 [ 391.047270][T15759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2517'. [ 391.247922][T15772] netlink: 'syz.5.2519': attribute type 30 has an invalid length. [ 391.272916][T15772] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 391.569586][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2522'. [ 391.604881][T15779] sch_tbf: burst 240 is lower than device lo mtu (65503) ! [ 392.399491][T15790] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 392.505856][T15800] netlink: 'syz.5.2527': attribute type 16 has an invalid length. [ 393.973088][T15807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.008412][T15803] lo speed is unknown, defaulting to 1000 [ 394.017262][T15803] wg1 speed is unknown, defaulting to 1000 [ 394.094148][T15810] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 394.373061][T15835] IPVS: length: 209 != 24 [ 394.386433][T15835] IPVS: length: 209 != 24 [ 394.396378][T15835] IPVS: length: 209 != 24 [ 394.405656][T15835] IPVS: length: 209 != 24 [ 394.413166][T15835] IPVS: length: 209 != 24 [ 394.417885][T15835] IPVS: length: 209 != 24 [ 394.422391][T15835] IPVS: length: 209 != 24 [ 394.471399][T15834] __nla_validate_parse: 1 callbacks suppressed [ 394.471415][T15834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'. [ 394.841360][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 395.329246][T15866] lo speed is unknown, defaulting to 1000 [ 395.341975][T15866] wg1 speed is unknown, defaulting to 1000 [ 395.415617][T15870] lo speed is unknown, defaulting to 1000 [ 395.483593][T15870] wg1 speed is unknown, defaulting to 1000 [ 396.202379][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 397.035692][T15942] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2564'. [ 397.232703][T15951] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2566'. [ 397.528434][T15959] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2569'. [ 397.571729][T15960] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2569'. [ 397.636226][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'. [ 397.664889][T15963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2570'. [ 397.674075][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'. [ 397.757112][T15963] bond15: entered promiscuous mode [ 397.776271][T15963] bond15: entered allmulticast mode [ 397.782431][T15963] 8021q: adding VLAN 0 to HW filter on device bond15 [ 397.842649][T15966] lo speed is unknown, defaulting to 1000 [ 397.850392][T15966] wg1 speed is unknown, defaulting to 1000 [ 398.497178][T16002] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 398.973940][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.985178][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.382145][T16032] macvtap1: entered promiscuous mode [ 399.392560][T16032] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 399.554263][T16043] __nla_validate_parse: 6 callbacks suppressed [ 399.554281][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2594'. [ 399.617571][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.634082][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.646193][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.655927][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.666050][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.726104][T13491] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.779840][T13491] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.827122][ T9825] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.906496][T16045] lo speed is unknown, defaulting to 1000 [ 399.913269][ T9825] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.969487][T13492] tipc: Resetting bearer [ 400.401259][T16065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2596'. [ 400.708881][T13492] tipc: Disabling bearer [ 401.154492][T13492] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 401.163187][T13492] bond0 (unregistering): Released all slaves [ 401.176663][T13492] bond1 (unregistering): Released all slaves [ 401.189631][T13492] bond2 (unregistering): Released all slaves [ 401.322050][T13492] bond3 (unregistering): Released all slaves [ 401.429758][T13492] bond4 (unregistering): Released all slaves [ 401.442206][T13492] bond5 (unregistering): Released all slaves [ 401.571538][T13492] bond6 (unregistering): (slave bond7): Releasing backup interface [ 401.580384][T13492] bond6 (unregistering): Released all slaves [ 401.677900][T13492] bond7 (unregistering): Released all slaves [ 401.691180][T13492] bond8 (unregistering): Released all slaves [ 401.703720][ T5865] Bluetooth: hci2: command tx timeout [ 401.705070][T13492] bond9 (unregistering): Released all slaves [ 401.722129][T13492] bond10 (unregistering): Released all slaves [ 401.737695][T13492] bond11 (unregistering): Released all slaves [ 401.837135][T13492] bond12 (unregistering): Released all slaves [ 401.850286][T13492] bond13 (unregistering): Released all slaves [ 401.863154][T13492] bond14 (unregistering): Released all slaves [ 401.963356][T13492] bond15 (unregistering): Released all slaves [ 401.975628][T16045] wg1 speed is unknown, defaulting to 1000 [ 402.006257][T16071] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 402.142091][T16062] lo speed is unknown, defaulting to 1000 [ 402.155678][T16062] wg1 speed is unknown, defaulting to 1000 [ 402.290093][T13492] : left promiscuous mode [ 402.434689][T13492] tipc: Left network mode [ 402.523344][T16092] lo speed is unknown, defaulting to 1000 [ 402.650175][T16092] wg1 speed is unknown, defaulting to 1000 [ 402.650266][T16097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.676892][T16097] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 402.956985][T16045] chnl_net:caif_netlink_parms(): no params data found [ 403.424783][T16123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2612'. [ 403.442306][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2612'. [ 403.597334][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2615'. [ 403.775320][ T5865] Bluetooth: hci2: command tx timeout [ 403.865669][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.893442][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.937770][T16045] bridge_slave_0: entered allmulticast mode [ 404.015339][T16045] bridge_slave_0: entered promiscuous mode [ 404.039190][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.061134][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.080464][T16045] bridge_slave_1: entered allmulticast mode [ 404.158380][T16045] bridge_slave_1: entered promiscuous mode [ 404.601968][T16147] lo speed is unknown, defaulting to 1000 [ 404.620768][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.670466][T16147] wg1 speed is unknown, defaulting to 1000 [ 404.689204][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.748723][T16161] netlink: 'syz.2.2622': attribute type 1 has an invalid length. [ 404.836571][T16045] team0: Port device team_slave_0 added [ 404.898887][T16045] team0: Port device team_slave_1 added [ 404.949160][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2624'. [ 405.046297][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.053263][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.087047][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.140675][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.148342][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.175319][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.353153][T13492] pimreg (unregistering): left allmulticast mode [ 405.854478][ T5865] Bluetooth: hci2: command tx timeout [ 406.048204][T16045] hsr_slave_0: entered promiscuous mode [ 406.062218][T16045] hsr_slave_1: entered promiscuous mode [ 406.076986][T16045] debugfs: 'hsr0' already exists in 'hsr' [ 406.082710][T16045] Cannot create hsr debugfs directory [ 406.088472][T10377] lo speed is unknown, defaulting to 1000 [ 406.098827][T10377] infiniband syz2: ib_query_port failed (-19) [ 406.428510][T14626] cgroup: fork rejected by pids controller in /syz8 [ 406.497125][T13492] IPVS: stop unused estimator thread 0... [ 406.523115][T16045] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.644871][T16045] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.777665][T16045] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.912267][T16045] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.100038][T13489] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.185547][T13489] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.211256][T16045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.223290][T16045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.240013][T16045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.251571][T16045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.324764][T16230] netlink: 'syz.2.2643': attribute type 58 has an invalid length. [ 407.325667][T13489] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.332750][T16230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2643'. [ 407.422191][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2644'. [ 407.498394][T13489] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.547282][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 407.558243][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 407.572995][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 407.584786][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 407.600616][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 407.628905][T16045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.665442][T16045] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.701858][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.709071][T13491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.737330][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.744545][T13491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.787490][T13492] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.872107][T13491] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.933085][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2650'. [ 407.942400][ T51] Bluetooth: hci2: command tx timeout [ 407.980067][ T1328] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.988632][ T1328] netdevsim netdevsim8 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.010861][T13489] bridge_slave_1: left allmulticast mode [ 408.022969][T13489] bridge_slave_1: left promiscuous mode [ 408.031255][T13489] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.059004][T13489] bridge_slave_0: left allmulticast mode [ 408.065261][T13489] bridge_slave_0: left promiscuous mode [ 408.071101][T13489] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.363319][T13489] team0: Port device bridge1 removed [ 408.627283][T13489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.638288][T13489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.648524][T13489] bond0 (unregistering): Released all slaves [ 408.664095][T13489] bond1 (unregistering): Released all slaves [ 409.184199][T13489] hsr_slave_0: left promiscuous mode [ 409.251545][T13489] hsr_slave_1: left promiscuous mode [ 409.256394][T16293] netlink: 'syz.5.2661': attribute type 21 has an invalid length. [ 409.261510][T13489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.288361][T13489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.309654][T13489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.370163][T13489] veth1_macvtap: left promiscuous mode [ 409.381584][T13489] veth0_macvtap: left promiscuous mode [ 409.388378][T13489] veth1_vlan: left promiscuous mode [ 409.394079][T13489] veth0_vlan: left promiscuous mode [ 409.695903][ T5865] Bluetooth: hci8: command tx timeout [ 409.970210][T13489] team0 (unregistering): Port device team_slave_1 removed [ 410.002363][T16303] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2664'. [ 410.012853][T13489] team0 (unregistering): Port device team_slave_0 removed [ 410.468080][T16240] chnl_net:caif_netlink_parms(): no params data found [ 410.534302][T16045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.834331][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.844596][T13489] IPVS: stop unused estimator thread 0... [ 410.850483][T16240] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.861747][T16240] bridge_slave_0: entered allmulticast mode [ 410.872049][T16240] bridge_slave_0: entered promiscuous mode [ 410.889876][T16330] netlink: 'syz.9.2671': attribute type 4 has an invalid length. [ 410.901370][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.908875][T16240] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.918879][T16240] bridge_slave_1: entered allmulticast mode [ 410.926491][T16240] bridge_slave_1: entered promiscuous mode [ 410.959787][T16329] netlink: 6 bytes leftover after parsing attributes in process `syz.9.2671'. [ 410.972918][T16329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.031060][T16240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.057339][T16240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.140283][T16045] veth0_vlan: entered promiscuous mode [ 411.190900][T16240] team0: Port device team_slave_0 added [ 411.216959][T16240] team0: Port device team_slave_1 added [ 411.270639][T16045] veth1_vlan: entered promiscuous mode [ 411.294822][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 411.361616][T16240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.375764][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.408204][T16240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.421134][T16240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.428729][T16240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.474870][T16240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.650162][T16240] hsr_slave_0: entered promiscuous mode [ 411.659294][T16240] hsr_slave_1: entered promiscuous mode [ 411.666677][T16240] debugfs: 'hsr0' already exists in 'hsr' [ 411.672540][T16240] Cannot create hsr debugfs directory [ 411.776749][ T51] Bluetooth: hci8: command tx timeout [ 411.969458][T16045] veth0_macvtap: entered promiscuous mode [ 412.019560][T16045] veth1_macvtap: entered promiscuous mode [ 412.178451][T16240] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.202854][T16373] tipc: Enabled bearer , priority 25 [ 412.319813][T16240] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.408085][T16045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.461495][T16240] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.550341][T16045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.598129][T16240] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.633590][ T1328] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.656044][ T1328] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.682791][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2688'. [ 412.702046][ T1328] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.731424][T16392] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 412.749058][ T1328] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.862945][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2690'. [ 412.888169][T16399] netlink: 'syz.2.2690': attribute type 7 has an invalid length. [ 412.922987][T16399] netlink: 'syz.2.2690': attribute type 8 has an invalid length. [ 412.935229][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2690'. [ 412.972941][T16407] netlink: 'syz.5.2691': attribute type 9 has an invalid length. [ 412.992903][T13489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.001583][T13489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.095640][T16240] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 413.112999][T16240] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 413.140021][T13489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.148889][T13489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.157082][T16240] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 413.191677][T16240] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 413.266667][T13489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.284069][T13489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.302039][T16425] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2694'. [ 413.407548][T16240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.437721][T16240] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.452755][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.459982][T13492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.483486][ T9825] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.490657][ T9825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.853974][ T51] Bluetooth: hci8: command tx timeout [ 414.227634][T16451] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2702'. [ 414.301883][T16454] bond3: entered promiscuous mode [ 414.308091][T16454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.317035][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 414.326435][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2703'. [ 414.354338][T16454] netlink: 'syz.5.2700': attribute type 7 has an invalid length. [ 414.361488][T16461] bond4: entered promiscuous mode [ 414.368062][T16461] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.376067][T16464] netlink: 'syz.5.2700': attribute type 7 has an invalid length. [ 414.413073][ T1328] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.426969][T16450] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2702'. [ 414.508940][ T1328] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.524702][ T1328] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.567312][ T1328] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.607586][T16240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.455640][T16496] __nla_validate_parse: 1 callbacks suppressed [ 415.455657][T16496] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2712'. [ 415.899523][T16240] veth0_vlan: entered promiscuous mode [ 415.935481][ T51] Bluetooth: hci8: command tx timeout [ 416.054005][T16240] veth1_vlan: entered promiscuous mode [ 416.078180][T16518] tipc: Started in network mode [ 416.089773][T16518] tipc: Node identity de76a5a9e93a, cluster identity 4711 [ 416.103707][T16518] tipc: Enabled bearer , priority 0 [ 416.154626][T16518] syzkaller0: entered promiscuous mode [ 416.160118][T16518] syzkaller0: entered allmulticast mode [ 416.193227][T16517] tipc: Resetting bearer [ 416.211082][T16517] tipc: Disabling bearer [ 416.246976][T16240] veth0_macvtap: entered promiscuous mode [ 416.277486][T16240] veth1_macvtap: entered promiscuous mode [ 416.352781][T16240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.425337][T16240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.520067][T13490] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.535339][T13490] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.575797][T13490] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.621076][T13490] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.622360][T16554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2727'. [ 416.671782][T16554] veth1: entered allmulticast mode [ 416.794743][T13490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.802585][T13490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.812859][T16561] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2728'. [ 416.892976][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.909490][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.924519][T16563] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2729'. [ 417.042011][T16567] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 417.105863][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2640'. [ 417.136746][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2640'. [ 417.156619][T16569] netlink: 'syz.8.2640': attribute type 21 has an invalid length. [ 417.181947][T16569] netlink: 'syz.8.2640': attribute type 1 has an invalid length. [ 417.973722][ T51] block nbd1: Receive control failed (result -32) [ 418.140229][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.150694][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.163428][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.176826][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.185516][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.275096][T16601] netlink: 'syz.8.2738': attribute type 3 has an invalid length. [ 418.482871][T16607] netlink: 'syz.5.2741': attribute type 1 has an invalid length. [ 418.559738][T16607] 8021q: adding VLAN 0 to HW filter on device bond5 [ 418.597066][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2741'. [ 418.701742][T16611] bond5: (slave veth3): Enslaving as an active interface with a down link [ 418.729200][T16592] chnl_net:caif_netlink_parms(): no params data found [ 418.866814][T16621] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2744'. [ 418.876030][T16626] netlink: 'syz.9.2745': attribute type 1 has an invalid length. [ 418.884326][T16626] netlink: 184 bytes leftover after parsing attributes in process `syz.9.2745'. [ 418.894198][T16626] netlink: 'syz.9.2745': attribute type 1 has an invalid length. [ 418.952120][T16592] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.968470][T16592] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.009767][T16592] bridge_slave_0: entered allmulticast mode [ 419.034822][T16592] bridge_slave_0: entered promiscuous mode [ 419.047007][T16592] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.074792][T16592] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.082131][T16592] bridge_slave_1: entered allmulticast mode [ 419.092850][T16592] bridge_slave_1: entered promiscuous mode [ 419.168740][T16592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.185711][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2746'. [ 419.290705][T16592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.396894][T16592] team0: Port device team_slave_0 added [ 419.405596][T16592] team0: Port device team_slave_1 added [ 419.469136][T16592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.476242][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.503127][T16592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.520244][T16592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.527544][T16592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.555636][T16592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.632761][T16592] hsr_slave_0: entered promiscuous mode [ 419.640220][T16592] hsr_slave_1: entered promiscuous mode [ 419.647288][T16592] debugfs: 'hsr0' already exists in 'hsr' [ 419.653251][T16592] Cannot create hsr debugfs directory [ 419.842232][T16646] tipc: Enabled bearer , priority 0 [ 419.868057][T16646] tipc: Resetting bearer [ 420.254693][T16592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.263759][ T5865] Bluetooth: hci3: command tx timeout [ 420.273661][T16592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.299520][T16592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.318541][T16592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.476482][T16686] netlink: 'syz.0.2759': attribute type 6 has an invalid length. [ 420.563355][T16672] netlink: 'syz.0.2759': attribute type 29 has an invalid length. [ 420.600392][T16672] netlink: 'syz.0.2759': attribute type 29 has an invalid length. [ 420.628588][T16672] __nla_validate_parse: 2 callbacks suppressed [ 420.628606][T16672] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2759'. [ 420.744648][T16592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.868680][T16592] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.917725][T13492] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.924930][T13492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.045831][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.053005][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.355387][T16714] block nbd2: server does not support multiple connections per device. [ 421.420353][T16714] block nbd2: shutting down sockets [ 421.548340][T16723] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2771'. [ 421.619830][T16723] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2771'. [ 421.630328][T16725] ÿ: renamed from bond_slave_0 (while UP) [ 421.686046][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2771'. [ 421.686640][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.818862][T16734] netlink: 'syz.5.2772': attribute type 39 has an invalid length. [ 421.869007][T16737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 421.888724][T16736] veth0_to_bond: entered allmulticast mode [ 421.918813][T16592] veth0_vlan: entered promiscuous mode [ 421.944324][T16592] veth1_vlan: entered promiscuous mode [ 422.010062][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2778'. [ 422.032553][T16592] veth0_macvtap: entered promiscuous mode [ 422.040871][T16744] netlink: 468 bytes leftover after parsing attributes in process `syz.8.2779'. [ 422.047980][T16592] veth1_macvtap: entered promiscuous mode [ 422.077252][T16592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.103283][T16592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.135486][T13490] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.145256][T13490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.163643][T13490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.173124][T13490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.261867][T13492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.278912][T13492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.306534][ T9825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.315056][ T9825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.333646][ T5865] Bluetooth: hci3: command tx timeout [ 422.588711][T16761] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2782'. [ 422.778532][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2783'. [ 422.947378][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2785'. [ 423.007411][T16774] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2785'. [ 423.486193][T16790] tipc: Started in network mode [ 423.491171][T16790] tipc: Node identity ac14140f, cluster identity 4711 [ 423.499658][T16790] tipc: New replicast peer: 255.255.255.255 [ 423.525340][T16790] tipc: Enabled bearer , priority 10 [ 423.887274][T16807] netlink: 'syz.2.2796': attribute type 1 has an invalid length. [ 423.950946][T16809] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:3 [ 423.958269][T16806] delete_channel: no stack [ 424.124271][T16821] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 424.298003][T16834] netlink: 'syz.2.2804': attribute type 3 has an invalid length. [ 424.421520][ T5865] Bluetooth: hci3: command tx timeout [ 424.551436][T16849] syzkaller0: entered promiscuous mode [ 424.567034][T16849] syzkaller0: entered allmulticast mode [ 424.648742][ T5962] tipc: Node number set to 2886997007 [ 424.884184][T16872] netlink: 'syz.8.2818': attribute type 21 has an invalid length. [ 424.984400][T16880] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002 [ 424.996089][T16880] tunl0: entered promiscuous mode [ 425.361686][T16898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 425.424854][T16898] gretap1: entered promiscuous mode [ 425.430279][T16898] gretap1: entered allmulticast mode [ 425.785148][T16916] ip6gretap0: entered promiscuous mode [ 425.809623][T16916] macsec1: entered promiscuous mode [ 425.833705][T16916] macsec1: entered allmulticast mode [ 425.866389][T16916] ip6gretap0: entered allmulticast mode [ 425.927625][T16924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 426.501520][ T51] Bluetooth: hci3: command tx timeout [ 426.908740][T16985] __nla_validate_parse: 6 callbacks suppressed [ 426.908759][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2845'. [ 427.044831][T16985] macvtap0: entered promiscuous mode [ 427.069913][T16985] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 427.192454][T16999] netlink: 'syz.8.2847': attribute type 10 has an invalid length. [ 427.300273][T17005] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2850'. [ 427.320662][T16999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.340923][T16999] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 427.554269][T17009] block nbd2: server does not support multiple connections per device. [ 427.562754][T17009] block nbd2: shutting down sockets [ 427.722608][T17025] vxcan3: entered allmulticast mode [ 428.220066][T17042] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2860'. [ 428.401775][T17056] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 428.419435][T17057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2862'. [ 428.486901][T17063] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2866'. [ 428.632952][T17073] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2869'. [ 428.642543][T17073] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2869'. [ 428.654250][T17073] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2869'. [ 429.224720][T17100] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2873'. [ 429.253880][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2875'. [ 429.710356][T17100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.750761][T17100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.770748][T17100] bond0 (unregistering): Released all slaves [ 429.779456][T17128] sctp: [Deprecated]: syz.8.2880 (pid 17128) Use of int in maxseg socket option. [ 429.779456][T17128] Use struct sctp_assoc_value instead [ 429.909798][T17119] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 430.244403][T17140] netlink: 'syz.0.2885': attribute type 5 has an invalid length. [ 430.682398][ T5962] IPVS: starting estimator thread 0... [ 430.773877][T17151] IPVS: using max 32 ests per chain, 76800 per kthread [ 430.939954][T17158] netlink: 'syz.5.2887': attribute type 13 has an invalid length. [ 431.321667][T17158] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 431.525564][T17188] bond1: entered promiscuous mode [ 431.530953][T17188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.578163][T17189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.588631][T17189] bond2: entered promiscuous mode [ 431.601369][T17189] bond1: (slave bond2): Enslaving as an active interface with an up link [ 431.826397][T17197] veth1_macvtap: left promiscuous mode [ 432.216806][T17216] __nla_validate_parse: 6 callbacks suppressed [ 432.216826][T17216] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2903'. [ 432.261743][T17220] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2906'. [ 433.086758][T17256] syzkaller1: entered promiscuous mode [ 433.092642][T17256] syzkaller1: entered allmulticast mode [ 433.242979][T17266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 433.286098][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2919'. [ 433.363100][T13489] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.384103][T10377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.396716][T13489] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.439814][T17280] bridge0: port 1(erspan0) entered blocking state [ 433.446999][T17280] bridge0: port 1(erspan0) entered disabled state [ 433.457380][T17280] erspan0: entered allmulticast mode [ 433.479282][T17280] erspan0: left allmulticast mode [ 433.695611][T17300] tipc: Enabling of bearer rejected, already enabled [ 433.768249][T17301] tipc: Enabling of bearer rejected, already enabled [ 433.821949][T17303] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 433.829569][T17303] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 434.043659][T10377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.176973][T10377] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.251146][T17325] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 434.294420][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.302173][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.359515][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.366732][T17325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.374286][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.381449][T17325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.466680][T17325] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 434.712653][T17340] netlink: 'syz.0.2939': attribute type 9 has an invalid length. [ 434.737379][T17340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 435.018626][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2942'. [ 435.252679][T17359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.276974][T17359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.318016][T17359] hsr0: entered promiscuous mode [ 435.333321][T17359] hsr0: entered allmulticast mode [ 435.348186][T17359] hsr_slave_0: entered allmulticast mode [ 435.366715][T17359] hsr_slave_1: entered allmulticast mode [ 435.734416][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 435.954747][T17382] netlink: 'syz.9.2951': attribute type 1 has an invalid length. [ 436.098540][T17397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2956'. [ 436.126807][T17379] gretap1: entered promiscuous mode [ 436.227396][T17400] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2957'. [ 436.265516][T17400] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2957'. [ 436.389432][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2961'. [ 436.418817][T17418] netlink: 'syz.0.2963': attribute type 4 has an invalid length. [ 436.894996][T17444] batman_adv: batadv0: Adding interface: ipvlan2 [ 436.901569][T17444] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.927504][ T5865] Bluetooth: hci5: command 0x0406 tx timeout [ 436.935024][T17444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.946328][T17444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.958270][T17444] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 437.254453][T17472] __nla_validate_parse: 5 callbacks suppressed [ 437.254472][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2973'. [ 437.303664][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2973'. [ 437.411813][ T1209] IPVS: starting estimator thread 0... [ 437.534168][T17485] IPVS: using max 26 ests per chain, 62400 per kthread [ 437.596832][T17493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2983'. [ 437.774083][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.908879][T17502] netlink: 'syz.8.2987': attribute type 13 has an invalid length. [ 437.942778][T17502] netlink: 'syz.8.2987': attribute type 17 has an invalid length. [ 438.044701][T17503] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 438.077705][T17502] tunl0: left promiscuous mode [ 438.237917][T17502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.313423][T17510] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2989'. [ 438.344695][T17510] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 438.392478][T17511] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2989'. [ 438.417981][T17511] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 438.834633][T17543] gretap2: entered promiscuous mode [ 439.370241][T17562] FAULT_INJECTION: forcing a failure. [ 439.370241][T17562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.403962][T17562] CPU: 0 UID: 0 PID: 17562 Comm: syz.8.3006 Not tainted syzkaller #0 PREEMPT(full) [ 439.404006][T17562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.404028][T17562] Call Trace: [ 439.404036][T17562] [ 439.404045][T17562] dump_stack_lvl+0x189/0x250 [ 439.404072][T17562] ? __pfx____ratelimit+0x10/0x10 [ 439.404094][T17562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.404115][T17562] ? __pfx__printk+0x10/0x10 [ 439.404141][T17562] ? __might_fault+0xb0/0x130 [ 439.404178][T17562] should_fail_ex+0x414/0x560 [ 439.404211][T17562] _copy_from_user+0x2d/0xb0 [ 439.404236][T17562] ___sys_sendmsg+0x158/0x2a0 [ 439.404263][T17562] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.404330][T17562] ? __fget_files+0x2a/0x420 [ 439.404354][T17562] ? __fget_files+0x3a0/0x420 [ 439.404393][T17562] __x64_sys_sendmsg+0x19b/0x260 [ 439.404420][T17562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 439.404451][T17562] ? __pfx_ksys_write+0x10/0x10 [ 439.404472][T17562] ? rcu_is_watching+0x15/0xb0 [ 439.404494][T17562] ? do_syscall_64+0xbe/0x3b0 [ 439.404520][T17562] do_syscall_64+0xfa/0x3b0 [ 439.404539][T17562] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.404559][T17562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.404577][T17562] ? clear_bhb_loop+0x60/0xb0 [ 439.404600][T17562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.404617][T17562] RIP: 0033:0x7ff7dbf8eec9 [ 439.404635][T17562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.404650][T17562] RSP: 002b:00007ff7dcd9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.404668][T17562] RAX: ffffffffffffffda RBX: 00007ff7dc1e5fa0 RCX: 00007ff7dbf8eec9 [ 439.404682][T17562] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 439.404694][T17562] RBP: 00007ff7dcd9c090 R08: 0000000000000000 R09: 0000000000000000 [ 439.404705][T17562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.404716][T17562] R13: 00007ff7dc1e6038 R14: 00007ff7dc1e5fa0 R15: 00007ffe4b98cb18 [ 439.404748][T17562] [ 439.938210][ T1301] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 439.967963][T17589] netlink: 165 bytes leftover after parsing attributes in process `syz.8.3012'. [ 440.093919][ T5865] Bluetooth: hci0: command tx timeout [ 440.234176][T17606] FAULT_INJECTION: forcing a failure. [ 440.234176][T17606] name failslab, interval 1, probability 0, space 0, times 1 [ 440.234496][T17605] geneve2: entered promiscuous mode [ 440.262820][T17606] CPU: 0 UID: 0 PID: 17606 Comm: syz.5.3017 Not tainted syzkaller #0 PREEMPT(full) [ 440.262847][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.262858][T17606] Call Trace: [ 440.262866][T17606] [ 440.262875][T17606] dump_stack_lvl+0x189/0x250 [ 440.262902][T17606] ? __pfx____ratelimit+0x10/0x10 [ 440.262924][T17606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.262945][T17606] ? __pfx__printk+0x10/0x10 [ 440.262976][T17606] ? __pfx___might_resched+0x10/0x10 [ 440.263010][T17606] should_fail_ex+0x414/0x560 [ 440.263043][T17606] should_failslab+0xa8/0x100 [ 440.263071][T17606] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 440.263096][T17606] ? __alloc_skb+0x112/0x2d0 [ 440.263123][T17606] __alloc_skb+0x112/0x2d0 [ 440.263149][T17606] netlink_sendmsg+0x5c6/0xb30 [ 440.263183][T17606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.263210][T17606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 440.263241][T17606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.263261][T17606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.263284][T17606] __sock_sendmsg+0x21c/0x270 [ 440.263317][T17606] ____sys_sendmsg+0x505/0x830 [ 440.263348][T17606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.263383][T17606] ? import_iovec+0x74/0xa0 [ 440.263411][T17606] ___sys_sendmsg+0x21f/0x2a0 [ 440.263438][T17606] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.263503][T17606] ? __fget_files+0x2a/0x420 [ 440.263528][T17606] ? __fget_files+0x3a0/0x420 [ 440.263573][T17606] __x64_sys_sendmsg+0x19b/0x260 [ 440.263602][T17606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.263639][T17606] ? __pfx_ksys_write+0x10/0x10 [ 440.263661][T17606] ? rcu_is_watching+0x15/0xb0 [ 440.263685][T17606] ? do_syscall_64+0xbe/0x3b0 [ 440.263712][T17606] do_syscall_64+0xfa/0x3b0 [ 440.263732][T17606] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.263753][T17606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.263773][T17606] ? clear_bhb_loop+0x60/0xb0 [ 440.263796][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.263813][T17606] RIP: 0033:0x7fd00638eec9 [ 440.263830][T17606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.263847][T17606] RSP: 002b:00007fd00717d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.263866][T17606] RAX: ffffffffffffffda RBX: 00007fd0065e5fa0 RCX: 00007fd00638eec9 [ 440.263882][T17606] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 440.263894][T17606] RBP: 00007fd00717d090 R08: 0000000000000000 R09: 0000000000000000 [ 440.263906][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.263918][T17606] R13: 00007fd0065e6038 R14: 00007fd0065e5fa0 R15: 00007ffdeae562b8 [ 440.263950][T17606] [ 440.705983][T17605] netlink: 'syz.0.3018': attribute type 3 has an invalid length. [ 440.759189][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3021'. [ 440.942127][T17633] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 440.984092][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3025'. [ 441.030943][T17634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.651057][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'. [ 442.246174][ T30] audit: type=1800 audit(1759281530.499:12): pid=17682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3038" name="cgroup.controllers" dev="tmpfs" ino=1491 res=0 errno=0 [ 442.669519][T17704] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3044'. [ 443.503291][T17724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3050'. [ 443.527418][T17724] netlink: 'syz.8.3050': attribute type 13 has an invalid length. [ 443.541673][T17724] netlink: 'syz.8.3050': attribute type 17 has an invalid length. [ 443.587405][T17724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.675889][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3050'. [ 443.829287][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3053'. [ 444.006517][ T5938] IPVS: starting estimator thread 0... [ 444.022261][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 444.031621][T17747] netlink: 'syz.2.3059': attribute type 15 has an invalid length. [ 444.046929][ T9825] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.050608][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3059'. [ 444.056702][ T9825] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.065399][T17747] netlink: 'syz.2.3059': attribute type 15 has an invalid length. [ 444.076461][ T9825] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.090708][ T9825] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.103790][T17745] IPVS: using max 33 ests per chain, 79200 per kthread [ 444.129213][T17749] netlink: 'syz.5.3058': attribute type 6 has an invalid length. [ 444.179384][T17751] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 444.581375][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3065'. [ 445.521388][ T5938] IPVS: starting estimator thread 0... [ 445.536264][T17799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 445.613929][T17798] IPVS: using max 27 ests per chain, 64800 per kthread [ 445.851878][T17808] tipc: Started in network mode [ 445.863284][T17808] tipc: Node identity ac14140f, cluster identity 4711 [ 445.871514][T17808] tipc: New replicast peer: 255.255.255.255 [ 445.879495][T17808] tipc: Enabled bearer , priority 10 [ 446.044591][T17817] netlink: 'syz.8.3075': attribute type 13 has an invalid length. [ 446.052433][T17817] netlink: 'syz.8.3075': attribute type 17 has an invalid length. [ 446.149066][T17821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3078'. [ 446.172220][T17817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.521845][T17839] !: renamed from dummy0 (while UP) [ 446.545422][T17844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3084'. [ 446.609934][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 446.676135][T17849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 446.800082][T17859] syzkaller1: entered promiscuous mode [ 446.805911][T17859] syzkaller1: entered allmulticast mode [ 446.973641][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.993979][ T5938] tipc: Node number set to 2886997007 [ 447.134244][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 447.165125][T17877] syzkaller1: entered promiscuous mode [ 447.170641][T17877] syzkaller1: entered allmulticast mode [ 447.801322][T17904] !: entered promiscuous mode [ 447.807567][T17904] macsec1: entered promiscuous mode [ 447.813020][T17904] macsec1: entered allmulticast mode [ 447.818719][T17904] !: entered allmulticast mode [ 447.960256][T17908] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 448.147667][T17920] __nla_validate_parse: 2 callbacks suppressed [ 448.147685][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 448.170385][T17920] netdevsim0: renamed from ip_vti0 [ 448.189482][T17920] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 448.253177][T17924] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3109'. [ 448.526065][T17933] geneve3: entered promiscuous mode [ 448.619343][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3112'. [ 449.579642][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3123'. [ 449.622394][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3123'. [ 450.108600][T18000] bond0: (slave bridge0): Releasing backup interface [ 450.117015][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.124441][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.145568][T18000] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 450.158031][T18000] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 450.318859][T18000] bridge_slave_0: left allmulticast mode [ 450.330862][T18000] bridge_slave_0: left promiscuous mode [ 450.338581][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.350425][T18000] bridge_slave_1: left allmulticast mode [ 450.356528][T18000] bridge_slave_1: left promiscuous mode [ 450.362450][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.380074][T18000] bond0: (slave 77ÿ): Releasing backup interface [ 450.400820][T18000] bond0: (slave bond_slave_1): Releasing backup interface [ 450.461806][T18000] team0: Failed to send options change via netlink (err -105) [ 450.497692][T18000] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 450.511237][T18000] team0: Port device team_slave_0 removed [ 450.538242][T18000] team0: Failed to send options change via netlink (err -105) [ 450.549818][T18000] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 450.560201][T18000] team0: Port device team_slave_1 removed [ 450.566896][T18000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.574856][T18000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.584928][T18000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.592378][T18000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.602399][T18000] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.629501][T18005] team0: Failed to send options change via netlink (err -105) [ 450.661147][T18005] team0: Mode changed to "activebackup" [ 451.193827][T18049] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3140'. [ 452.032065][T18081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.207173][T18091] netlink: 'syz.8.3149': attribute type 1 has an invalid length. [ 452.362397][T18096] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3151'. [ 452.457580][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3154'. [ 452.851512][T18115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3156'. [ 453.056333][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 453.107606][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 453.615767][T18131] tipc: Enabling of bearer rejected, already enabled [ 453.945319][T18157] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3167'. [ 453.960556][T18157] netlink: zone id is out of range [ 453.966699][T18157] netlink: zone id is out of range [ 453.971910][T18157] netlink: zone id is out of range [ 453.977964][T18157] netlink: zone id is out of range [ 453.983160][T18157] netlink: zone id is out of range [ 453.989023][T18157] netlink: zone id is out of range [ 453.994391][T18157] netlink: zone id is out of range [ 454.000511][T18157] netlink: zone id is out of range [ 454.230806][T18175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3172'. [ 454.350887][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 454.360237][T18187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 454.372870][T18187] netlink: 'syz.0.3175': attribute type 5 has an invalid length. [ 454.507395][T18194] FAULT_INJECTION: forcing a failure. [ 454.507395][T18194] name failslab, interval 1, probability 0, space 0, times 0 [ 454.520922][T18194] CPU: 0 UID: 0 PID: 18194 Comm: syz.8.3178 Not tainted syzkaller #0 PREEMPT(full) [ 454.520947][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.520959][T18194] Call Trace: [ 454.520967][T18194] [ 454.520975][T18194] dump_stack_lvl+0x189/0x250 [ 454.521002][T18194] ? __pfx____ratelimit+0x10/0x10 [ 454.521022][T18194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.521044][T18194] ? __pfx__printk+0x10/0x10 [ 454.521065][T18194] ? trace_contention_end+0x39/0x120 [ 454.521100][T18194] should_fail_ex+0x414/0x560 [ 454.521132][T18194] should_failslab+0xa8/0x100 [ 454.521169][T18194] kmem_cache_alloc_noprof+0x73/0x3c0 [ 454.521192][T18194] ? skb_clone+0x212/0x3a0 [ 454.521224][T18194] skb_clone+0x212/0x3a0 [ 454.521253][T18194] __netlink_deliver_tap+0x404/0x850 [ 454.521290][T18194] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.521314][T18194] netlink_deliver_tap+0x19c/0x1b0 [ 454.521337][T18194] netlink_dump+0x92b/0xe90 [ 454.521373][T18194] ? __pfx_netlink_dump+0x10/0x10 [ 454.521411][T18194] ? genl_start+0x499/0x6c0 [ 454.521446][T18194] __netlink_dump_start+0x5cb/0x7e0 [ 454.521478][T18194] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 454.521510][T18194] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 454.521537][T18194] ? genl_get_cmd+0x7d9/0x910 [ 454.521570][T18194] ? __pfx_genl_start+0x10/0x10 [ 454.521595][T18194] ? __pfx_genl_dumpit+0x10/0x10 [ 454.521619][T18194] ? __pfx_genl_done+0x10/0x10 [ 454.521665][T18194] genl_rcv_msg+0x5da/0x790 [ 454.521701][T18194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.521727][T18194] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 454.521747][T18194] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 454.521770][T18194] ? __asan_memcpy+0x40/0x70 [ 454.521790][T18194] ? __pfx_ref_tracker_free+0x10/0x10 [ 454.521829][T18194] netlink_rcv_skb+0x208/0x470 [ 454.521848][T18194] ? __lock_acquire+0xab9/0xd20 [ 454.521875][T18194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 454.521905][T18194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.521951][T18194] ? down_read+0x1ad/0x2e0 [ 454.521978][T18194] genl_rcv+0x28/0x40 [ 454.522003][T18194] netlink_unicast+0x82c/0x9e0 [ 454.522032][T18194] ? __pfx_netlink_unicast+0x10/0x10 [ 454.522053][T18194] ? netlink_sendmsg+0x642/0xb30 [ 454.522072][T18194] ? skb_put+0x11b/0x210 [ 454.522100][T18194] netlink_sendmsg+0x805/0xb30 [ 454.522133][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.522166][T18194] ? aa_sock_msg_perm+0xf1/0x1d0 [ 454.522198][T18194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.522217][T18194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.522239][T18194] __sock_sendmsg+0x21c/0x270 [ 454.522270][T18194] ____sys_sendmsg+0x505/0x830 [ 454.522302][T18194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.522337][T18194] ? import_iovec+0x74/0xa0 [ 454.522366][T18194] ___sys_sendmsg+0x21f/0x2a0 [ 454.522392][T18194] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.522458][T18194] ? __fget_files+0x2a/0x420 [ 454.522484][T18194] ? __fget_files+0x3a0/0x420 [ 454.522523][T18194] __x64_sys_sendmsg+0x19b/0x260 [ 454.522552][T18194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.522587][T18194] ? __pfx_ksys_write+0x10/0x10 [ 454.522608][T18194] ? rcu_is_watching+0x15/0xb0 [ 454.522633][T18194] ? do_syscall_64+0xbe/0x3b0 [ 454.522660][T18194] do_syscall_64+0xfa/0x3b0 [ 454.522680][T18194] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.522701][T18194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.522721][T18194] ? clear_bhb_loop+0x60/0xb0 [ 454.522745][T18194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.522764][T18194] RIP: 0033:0x7ff7dbf8eec9 [ 454.522782][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.522798][T18194] RSP: 002b:00007ff7dcd9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.522820][T18194] RAX: ffffffffffffffda RBX: 00007ff7dc1e5fa0 RCX: 00007ff7dbf8eec9 [ 454.522835][T18194] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 454.522847][T18194] RBP: 00007ff7dcd9c090 R08: 0000000000000000 R09: 0000000000000000 [ 454.522859][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.522871][T18194] R13: 00007ff7dc1e6038 R14: 00007ff7dc1e5fa0 R15: 00007ffe4b98cb18 [ 454.522905][T18194] [ 455.022722][T18195] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 455.055785][T18195] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 455.063678][T18195] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3179'. [ 455.073078][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 455.107571][T18206] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 455.141333][T18206] netlink: 'syz.2.3182': attribute type 3 has an invalid length. [ 455.163674][T18206] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3182'. [ 455.202437][T18210] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 455.227822][T18210] netlink: 'syz.2.3182': attribute type 3 has an invalid length. [ 455.248243][T18210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3182'. [ 455.869592][T18226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3189'. [ 455.935417][ T31] INFO: task syz.1.1761:12862 blocked for more than 143 seconds. [ 455.954937][ T31] Not tainted syzkaller #0 [ 455.963586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.972271][ T31] task:syz.1.1761 state:D stack:25864 pid:12862 tgid:12860 ppid:5879 task_flags:0x400140 flags:0x00004004 [ 455.984892][ T31] Call Trace: [ 455.988327][ T31] [ 455.991351][ T31] __schedule+0x1798/0x4cc0 [ 455.996294][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.001256][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.006632][ T31] ? __pfx___schedule+0x10/0x10 [ 456.011582][ T31] ? schedule+0x91/0x360 [ 456.016219][ T31] schedule+0x165/0x360 [ 456.020537][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.027940][ T31] __mutex_lock+0x7e6/0x1350 [ 456.032689][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.037930][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 456.044309][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.049486][ T31] ? __asan_memset+0x22/0x50 [ 456.077479][ T31] ? ____sys_sendmsg+0x505/0x830 [ 456.082458][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 456.091008][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 456.096763][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 456.102797][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 456.108853][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 456.132826][ T31] ? __nla_parse+0x40/0x60 [ 456.145013][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 456.166328][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 456.172291][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.181932][ T31] ? bpf_lsm_capable+0x9/0x20 [ 456.187157][ T31] ? security_capable+0x7e/0x2e0 [ 456.192189][ T31] genl_rcv_msg+0x60e/0x790 [ 456.196840][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.201940][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 456.208704][ T31] netlink_rcv_skb+0x208/0x470 [ 456.213833][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.218703][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.224152][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.229532][ T31] ? down_read+0x1ad/0x2e0 [ 456.234075][ T31] genl_rcv+0x28/0x40 [ 456.238131][ T31] netlink_unicast+0x82c/0x9e0 [ 456.243168][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 456.251995][ T31] ? netlink_sendmsg+0x642/0xb30 [ 456.258240][ T31] ? skb_put+0x11b/0x210 [ 456.262779][ T31] netlink_sendmsg+0x805/0xb30 [ 456.267896][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.273300][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.278417][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.284085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.289388][ T31] __sock_sendmsg+0x21c/0x270 [ 456.294409][ T31] ____sys_sendmsg+0x505/0x830 [ 456.299200][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.304896][ T31] ? import_iovec+0x74/0xa0 [ 456.309434][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 456.314263][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.319615][ T31] ? __fget_files+0x2a/0x420 [ 456.343219][ T31] ? __fget_files+0x3a0/0x420 [ 456.348358][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 456.353389][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.361343][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.367547][ T31] ? do_syscall_64+0xbe/0x3b0 [ 456.372325][ T31] do_syscall_64+0xfa/0x3b0 [ 456.376994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.382272][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.388688][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.393541][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.403975][ T31] RIP: 0033:0x7f6bfc38eec9 [ 456.408408][ T31] RSP: 002b:00007f6bfd21b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.420358][ T31] RAX: ffffffffffffffda RBX: 00007f6bfc5e6090 RCX: 00007f6bfc38eec9 [ 456.429139][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 456.437463][ T31] RBP: 00007f6bfc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.445973][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.454264][ T31] R13: 00007f6bfc5e6128 R14: 00007f6bfc5e6090 R15: 00007ffe869e2c68 [ 456.462326][ T31] [ 456.466027][ T31] INFO: task syz.3.1787:12947 blocked for more than 143 seconds. [ 456.476879][ T31] Not tainted syzkaller #0 [ 456.481819][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 456.490665][ T31] task:syz.3.1787 state:D stack:23080 pid:12947 tgid:12946 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 456.502678][ T31] Call Trace: [ 456.506104][ T31] [ 456.509028][ T31] __schedule+0x1798/0x4cc0 [ 456.513670][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.518526][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.523399][ T31] ? __pfx___schedule+0x10/0x10 [ 456.528549][ T31] ? schedule+0x91/0x360 [ 456.532979][ T31] schedule+0x165/0x360 [ 456.537260][ T31] schedule_preempt_disabled+0x13/0x30 [ 456.542731][ T31] __mutex_lock+0x7e6/0x1350 [ 456.564323][ T31] ? __mutex_lock+0x5bb/0x1350 [ 456.569130][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 456.577202][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 456.582253][ T31] ? __asan_memset+0x22/0x50 [ 456.600472][ T31] ? ____sys_sendmsg+0x505/0x830 [ 456.605595][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 456.610575][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 456.616045][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 456.621896][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 456.627770][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 456.634093][ T31] ? __nla_parse+0x40/0x60 [ 456.638585][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 456.645092][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 456.651251][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.657764][ T31] ? bpf_lsm_capable+0x9/0x20 [ 456.662529][ T31] ? security_capable+0x7e/0x2e0 [ 456.667645][ T31] genl_rcv_msg+0x60e/0x790 [ 456.672279][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.677431][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 456.683891][ T31] netlink_rcv_skb+0x208/0x470 [ 456.688744][ T31] ? __lock_acquire+0xab9/0xd20 [ 456.694295][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.699405][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.704769][ T31] ? down_read+0x1ad/0x2e0 [ 456.709192][ T31] genl_rcv+0x28/0x40 [ 456.713169][ T31] netlink_unicast+0x82c/0x9e0 [ 456.717992][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 456.723278][ T31] ? netlink_sendmsg+0x642/0xb30 [ 456.728247][ T31] ? skb_put+0x11b/0x210 [ 456.732498][ T31] netlink_sendmsg+0x805/0xb30 [ 456.737540][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.742859][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.748353][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.754019][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.759314][ T31] __sock_sendmsg+0x21c/0x270 [ 456.764032][ T31] ____sys_sendmsg+0x505/0x830 [ 456.768786][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.774165][ T31] ? import_iovec+0x74/0xa0 [ 456.778667][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 456.783330][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.788573][ T31] ? __fget_files+0x2a/0x420 [ 456.793152][ T31] ? __fget_files+0x3a0/0x420 [ 456.797849][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 456.802775][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.808478][ T31] ? rcu_is_watching+0x15/0xb0 [ 456.813257][ T31] ? do_syscall_64+0xbe/0x3b0 [ 456.818086][ T31] do_syscall_64+0xfa/0x3b0 [ 456.822597][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.827848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.833939][ T31] ? clear_bhb_loop+0x60/0xb0 [ 456.838600][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.844526][ T31] RIP: 0033:0x7ff5e638eec9 [ 456.848922][ T31] RSP: 002b:00007ff5e72c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.857713][ T31] RAX: ffffffffffffffda RBX: 00007ff5e65e5fa0 RCX: 00007ff5e638eec9 [ 456.865743][ T31] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000007 [ 456.873732][ T31] RBP: 00007ff5e6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.881697][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.889699][ T31] R13: 00007ff5e65e6038 R14: 00007ff5e65e5fa0 R15: 00007ffc3cfda1f8 [ 456.897879][ T31] [ 456.901042][ T31] [ 456.901042][ T31] Showing all locks held in the system: [ 456.917298][ T31] 1 lock held by ksoftirqd/0/15: [ 456.928462][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 456.938724][ T31] 1 lock held by khungtaskd/31: [ 456.943598][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 456.953735][ T31] 2 locks held by getty/5622: [ 456.958401][ T31] #0: ffff88803075d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 456.968362][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 456.978672][ T31] 2 locks held by syz.4.1525/11946: [ 456.983955][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 456.992164][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 457.002415][ T31] 2 locks held by syz.1.1761/12862: [ 457.007634][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 457.015838][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 457.026147][ T31] 2 locks held by syz.3.1787/12947: [ 457.031325][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 457.039587][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 457.049895][ T31] 3 locks held by kworker/u8:23/13489: [ 457.058386][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 457.069589][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 457.078550][ T31] #2: ffff88803fd10788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 457.088617][ T31] 4 locks held by kworker/u8:26/13492: [ 457.094323][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 457.105453][ T31] #1: ffffc9001aedfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 457.116046][ T31] #2: ffffffff8f52dd50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 457.126336][ T31] #3: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 457.138286][ T31] 2 locks held by syz.6.2076/14119: [ 457.143538][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 457.151771][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 457.162368][ T31] 2 locks held by syz.9.3036/17667: [ 457.167612][ T31] #0: ffffffff8f5a0710 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 457.175815][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 457.186090][ T31] [ 457.188421][ T31] ============================================= [ 457.188421][ T31] [ 457.196952][ T31] NMI backtrace for cpu 1 [ 457.196968][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 457.196988][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.197000][ T31] Call Trace: [ 457.197008][ T31] [ 457.197018][ T31] dump_stack_lvl+0x189/0x250 [ 457.197046][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.197067][ T31] ? __pfx__printk+0x10/0x10 [ 457.197109][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 457.197135][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 457.197161][ T31] ? __pfx__printk+0x10/0x10 [ 457.197184][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 457.197211][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 457.197237][ T31] watchdog+0xf93/0xfe0 [ 457.197263][ T31] ? watchdog+0x1de/0xfe0 [ 457.197291][ T31] kthread+0x70e/0x8a0 [ 457.197315][ T31] ? __pfx_watchdog+0x10/0x10 [ 457.197336][ T31] ? __pfx_kthread+0x10/0x10 [ 457.197360][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.197379][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.197398][ T31] ? __pfx_kthread+0x10/0x10 [ 457.197422][ T31] ret_from_fork+0x439/0x7d0 [ 457.197444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.197469][ T31] ? __switch_to_asm+0x39/0x70 [ 457.197492][ T31] ? __switch_to_asm+0x33/0x70 [ 457.197514][ T31] ? __pfx_kthread+0x10/0x10 [ 457.197539][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.197580][ T31] [ 457.197588][ T31] Sending NMI from CPU 1 to CPUs 0: [ 457.344539][ C0] NMI backtrace for cpu 0 [ 457.344556][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 457.344575][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.344585][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 457.344607][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 69 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 457.344622][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 457.344637][ C0] RAX: 487ee8917ab3a600 RBX: ffffffff81968528 RCX: 487ee8917ab3a600 [ 457.344650][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b220d RDI: ffffffff8be33f80 [ 457.344661][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 457.344674][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa30930 [ 457.344686][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 457.344698][ C0] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 457.344711][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.344723][ C0] CR2: 00007fffafd1efa8 CR3: 0000000079e0a000 CR4: 00000000003526f0 [ 457.344738][ C0] Call Trace: [ 457.344745][ C0] [ 457.344751][ C0] default_idle+0x13/0x20 [ 457.344771][ C0] default_idle_call+0x74/0xb0 [ 457.344792][ C0] do_idle+0x1e8/0x510 [ 457.344829][ C0] ? __pfx_do_idle+0x10/0x10 [ 457.344861][ C0] cpu_startup_entry+0x44/0x60 [ 457.344885][ C0] rest_init+0x2de/0x300 [ 457.344907][ C0] start_kernel+0x3a9/0x410 [ 457.344932][ C0] x86_64_start_reservations+0x24/0x30 [ 457.344950][ C0] x86_64_start_kernel+0x143/0x1c0 [ 457.344968][ C0] common_startup_64+0x13e/0x147 [ 457.344997][ C0] [ 457.523054][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 457.529938][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 457.539044][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.549094][ T31] Call Trace: [ 457.552362][ T31] [ 457.555283][ T31] dump_stack_lvl+0x99/0x250 [ 457.559875][ T31] ? __asan_memcpy+0x40/0x70 [ 457.564457][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.569644][ T31] ? __pfx__printk+0x10/0x10 [ 457.574240][ T31] vpanic+0x281/0x750 [ 457.578217][ T31] ? __pfx_vpanic+0x10/0x10 [ 457.582711][ T31] ? preempt_schedule+0xae/0xc0 [ 457.587549][ T31] ? preempt_schedule_common+0x83/0xd0 [ 457.593002][ T31] panic+0xb9/0xc0 [ 457.596724][ T31] ? __pfx_panic+0x10/0x10 [ 457.601143][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 457.606529][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 457.612688][ T31] watchdog+0xfd2/0xfe0 [ 457.616847][ T31] ? watchdog+0x1de/0xfe0 [ 457.621177][ T31] kthread+0x70e/0x8a0 [ 457.625245][ T31] ? __pfx_watchdog+0x10/0x10 [ 457.629918][ T31] ? __pfx_kthread+0x10/0x10 [ 457.634509][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.639706][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.644894][ T31] ? __pfx_kthread+0x10/0x10 [ 457.649480][ T31] ret_from_fork+0x439/0x7d0 [ 457.654064][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 457.659170][ T31] ? __switch_to_asm+0x39/0x70 [ 457.663931][ T31] ? __switch_to_asm+0x33/0x70 [ 457.668687][ T31] ? __pfx_kthread+0x10/0x10 [ 457.673277][ T31] ret_from_fork_asm+0x1a/0x30 [ 457.678049][ T31] [ 457.681322][ T31] Kernel Offset: disabled [ 457.685632][ T31] Rebooting in 86400 seconds..